feat: complete biometric system features, self-onboarding alignment, bulk approval, and timezone trend fixes

.vscode/settings.json

@@ -0,0 +1,3 @@
+{
+  "css.lint.unknownAtRules": "ignore"
+}

backend/app/api/v1/analytics.py

@@ -85,26 +85,41 @@ def get_attendance_trends(
     # Generate list of dates
     date_list = [start_date + timedelta(days=i) for i in range(days)]
     
-    # Get total active employees
-    total_active = db.query(func.count(models.Employee.id)).filter(
+    # Get total active employees for this company
+    query = db.query(func.count(models.Employee.id)).filter(
         models.Employee.status == "Active"
-    ).scalar() or 0
+    )
+    if current_user.company_id is not None:
+        query = query.filter(models.Employee.company_id == current_user.company_id)
+    total_active = query.scalar() or 0
     
     trends = []
     for d in date_list:
-        present = db.query(func.count(models.Attendance.id)).filter(
+        # Present status checks (include WFH as active)
+        present_query = db.query(func.count(models.Attendance.id)).join(
+            models.Employee, models.Attendance.employee_id == models.Employee.id
+        ).filter(
             and_(
                 models.Attendance.date == d,
-                models.Attendance.status.in_(["Present", "Late", "Half Day"])
+                models.Attendance.status.in_(["Present", "Late", "Half Day", "WFH"])
             )
-        ).scalar() or 0
+        )
+        if current_user.company_id is not None:
+            present_query = present_query.filter(models.Employee.company_id == current_user.company_id)
+        present = present_query.scalar() or 0
         
-        late = db.query(func.count(models.Attendance.id)).filter(
+        # Late status check
+        late_query = db.query(func.count(models.Attendance.id)).join(
+            models.Employee, models.Attendance.employee_id == models.Employee.id
+        ).filter(
             and_(
                 models.Attendance.date == d,
                 models.Attendance.status == "Late"
             )
-        ).scalar() or 0
+        )
+        if current_user.company_id is not None:
+            late_query = late_query.filter(models.Employee.company_id == current_user.company_id)
+        late = late_query.scalar() or 0
         
         absent = max(0, total_active - present)
         
@@ -126,7 +141,10 @@ def get_department_distribution(
     Returns employee and attendance counts by department for ECharts.
     """
     today = date.today()
-    departments = db.query(models.Department).all()
+    if current_user.company_id is not None:
+        departments = db.query(models.Department).filter(models.Department.company_id == current_user.company_id).all()
+    else:
+        departments = db.query(models.Department).all()
     
     dist = []
     for dept in departments:
@@ -228,7 +246,93 @@ def get_attendance_heatmap(
     else:
         query = query.filter(models.Attendance.status.in_(["Present", "Late", "Half Day"]))
         
-    results = query.group_by(models.Attendance.date).all()
+    results = query.group_by(models.AttendanceDate).all() if hasattr(models, 'AttendanceDate') else query.group_by(models.Attendance.date).all()
     
     heatmap_data = {r[0].isoformat(): r[1] for r in results}
     return heatmap_data
+
+@router.get("/recognition")
+def get_recognition_analytics(
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_view)
+):
+    company_id = current_user.company_id
+    logs_query = db.query(models.AttendanceLog)
+    if company_id is not None:
+        logs_query = logs_query.join(models.Employee).filter(models.Employee.company_id == company_id)
+        
+    total_scans = logs_query.count()
+    spoofs = logs_query.filter(models.AttendanceLog.is_spoof == True).count()
+    
+    avg_confidence = db.query(func.avg(models.AttendanceLog.confidence))
+    if company_id is not None:
+        avg_confidence = avg_confidence.join(models.Employee).filter(models.Employee.company_id == company_id)
+    avg_confidence_val = avg_confidence.scalar() or 0.0
+    
+    avg_proc_time = db.query(func.avg(models.AttendanceLog.processing_time_ms))
+    if company_id is not None:
+        avg_proc_time = avg_proc_time.join(models.Employee).filter(models.Employee.company_id == company_id)
+    avg_proc_val = avg_proc_time.scalar() or 120.0  # fallback baseline ms
+    
+    return {
+        "total_scans": total_scans,
+        "spoof_attempts": spoofs,
+        "average_confidence": round(float(avg_confidence_val), 2),
+        "average_processing_time_ms": round(float(avg_proc_val), 1)
+    }
+
+@router.get("/occupancy")
+def get_office_occupancy(
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_view)
+):
+    company_id = current_user.company_id
+    today = date.today()
+    
+    active_emp_query = db.query(models.Employee).filter(models.Employee.status == "Active")
+    if company_id is not None:
+        active_emp_query = active_emp_query.filter(models.Employee.company_id == company_id)
+    total_strength = active_emp_query.count()
+    
+    present_query = db.query(models.Attendance).join(models.Employee).filter(
+        and_(
+            models.Attendance.date == today,
+            models.Attendance.check_in.isnot(None),
+            models.Attendance.check_out.is_(None)
+        )
+    )
+    if company_id is not None:
+        present_query = present_query.filter(models.Employee.company_id == company_id)
+        
+    occupied_count = present_query.count()
+    
+    return {
+        "total_strength": total_strength,
+        "occupied_count": occupied_count,
+        "occupancy_rate_percentage": round((occupied_count / total_strength * 100) if total_strength > 0 else 0.0, 1)
+    }
+
+@router.get("/late-trends")
+def get_late_trends(
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_view)
+):
+    company_id = current_user.company_id
+    today = date.today()
+    start_date = today - timedelta(days=30)
+    
+    query = db.query(
+        models.Attendance.date,
+        func.avg(models.Attendance.late_minutes)
+    ).join(models.Employee).filter(
+        and_(
+            models.Attendance.date >= start_date,
+            models.Attendance.late_minutes > 0
+        )
+    )
+    if company_id is not None:
+        query = query.filter(models.Employee.company_id == company_id)
+        
+    results = query.group_by(models.Attendance.date).order_by(models.Attendance.date.asc()).all()
+    
+    return [{"date": r[0].isoformat(), "average_late_minutes": round(float(r[1]), 1)} for r in results]

backend/app/api/v1/attendance.py

@@ -20,22 +20,24 @@ def read_daily_attendance(
     date_val: Optional[date] = None,
     employee_id: Optional[int] = None,
     department_id: Optional[int] = None,
+    company_id: Optional[int] = None,
     db: Session = Depends(get_db),
     current_user: models.User = Depends(checker_view)
 ):
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
     if not date_val:
         date_val = date.today()
     if department_id:
         dept = crud.get_department_by_id(db, department_id)
-        if not dept or (current_user.company_id is not None and dept.company_id != current_user.company_id):
+        if not dept or (target_company_id is not None and dept.company_id != target_company_id):
             raise HTTPException(status_code=404, detail="Department not found")
     if employee_id:
         emp = crud.get_employee_by_id(db, employee_id)
-        if not emp or (current_user.company_id is not None and emp.company_id != current_user.company_id):
+        if not emp or (target_company_id is not None and emp.company_id != target_company_id):
             raise HTTPException(status_code=404, detail="Employee not found")
             
     return crud.get_daily_attendance(
-        db, date_val=date_val, employee_id=employee_id, department_id=department_id, company_id=current_user.company_id
+        db, date_val=date_val, employee_id=employee_id, department_id=department_id, company_id=target_company_id
     )
 
 @router.put("/{id}", response_model=schemas.AttendanceOut)
@@ -163,10 +165,18 @@ def read_attendance_logs(
     limit: int = 100,
     employee_id: Optional[int] = None,
     date_str: Optional[str] = None, # YYYY-MM-DD
+    company_id: Optional[int] = None,
     db: Session = Depends(get_db),
-    current_user: models.User = Depends(checker_view)
+    current_user: models.User = Depends(security.get_current_user)
 ):
-    return crud.get_attendance_logs(db, company_id=current_user.company_id, skip=skip, limit=limit, employee_id=employee_id, date_str=date_str)
+    role_name = current_user.role.name if current_user.role else "Employee"
+    if role_name == "Employee":
+        if not current_user.employee:
+            return []
+        employee_id = current_user.employee.id
+        
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
+    return crud.get_attendance_logs(db, company_id=target_company_id, skip=skip, limit=limit, employee_id=employee_id, date_str=date_str)
 
 @router.get("/employee/{employee_id}", response_model=List[schemas.AttendanceOut])
 def get_employee_attendance_history(

backend/app/api/v1/auth.py

@@ -1,6 +1,7 @@
-from fastapi import APIRouter, Depends, HTTPException, status, Request
+from fastapi import APIRouter, Depends, HTTPException, status, Request, UploadFile, File, Form
 from fastapi.security import OAuth2PasswordRequestForm
 from sqlalchemy.orm import Session
+from sqlalchemy import select, and_
 from datetime import timedelta
 from jose import jwt, JWTError
 
@@ -11,9 +12,11 @@ from app.crud import crud
 from app.schemas import schemas
 from app.models import models
 
+from app.core.rate_limiter import check_login_rate_limit
+
 router = APIRouter()
 
-@router.post("/login", response_model=schemas.Token)
+@router.post("/login", response_model=schemas.Token, dependencies=[Depends(check_login_rate_limit)])
 def login(
     request: Request,
     form_data: OAuth2PasswordRequestForm = Depends(),
@@ -35,6 +38,12 @@ def login(
             detail="Incorrect email or password",
         )
     if not user.is_active:
+        role_name = user.role.name if user.role else "Employee"
+        if role_name in ["Admin", "HR"]:
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail="Your admin account is pending approval by the Super Admin."
+            )
         raise HTTPException(
             status_code=status.HTTP_400_BAD_REQUEST,
             detail="Inactive user account"
@@ -109,3 +118,196 @@ def read_users_me(
     current_user: models.User = Depends(security.get_current_user)
 ):
     return current_user
+
+@router.post("/register-admin", status_code=status.HTTP_201_CREATED)
+def register_admin(
+    payload: schemas.AdminRegister,
+    db: Session = Depends(get_db)
+):
+    # 1. Check if company name already exists
+    existing_company = crud.get_company_by_name(db, name=payload.company_name)
+    if existing_company:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Company name already registered"
+        )
+        
+    # 2. Check if email already exists
+    existing_user = crud.get_user_by_email(db, email=payload.email)
+    if existing_user:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="Email address already registered"
+        )
+        
+    # 3. Create company with "Pending Approval" status
+    company_create = schemas.CompanyCreate(
+        name=payload.company_name,
+        status="Pending Approval",
+        admin_email=payload.email,
+        phone=payload.phone,
+        address=payload.address,
+        max_employees=100,
+        available_tokens=1000
+    )
+    db_company = crud.create_company(db, company=company_create)
+    
+    # 4. Get Admin role
+    admin_role = crud.get_role_by_name(db, name="Admin")
+    if not admin_role:
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="Default Admin role not configured in the system"
+        )
+        
+    # 5. Create user linked to the company
+    user_create = schemas.UserCreate(
+        email=payload.email,
+        password=payload.password,
+        role_id=admin_role.id
+    )
+    crud.create_user(db, user=user_create, company_id=db_company.id)
+    
+    # 6. Ensure user account starts as Inactive / Pending Approval
+    db_user = crud.get_user_by_email(db, email=payload.email)
+    if db_user:
+        db_user.is_active = False
+        db.commit()
+        
+    return {"message": "Registration successful. Your account is pending approval by the Super Admin."}
+
+
+@router.get("/users", response_model=list[schemas.UserOut])
+def get_all_users(
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin"]))
+):
+    from sqlalchemy import select
+    return db.execute(select(models.User)).scalars().all()
+
+
+@router.put("/users/{user_id}", response_model=schemas.UserOut)
+def update_user_status(
+    user_id: int,
+    payload: schemas.UserUpdate,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin"]))
+):
+    db_user = db.get(models.User, user_id)
+    if not db_user:
+        raise HTTPException(status_code=404, detail="User not found")
+    if payload.is_active is not None:
+        db_user.is_active = payload.is_active
+    if payload.role_id is not None:
+        db_user.role_id = payload.role_id
+    db.commit()
+    db.refresh(db_user)
+    return db_user
+
+@router.get("/companies/check")
+def check_company_name(name: str, db: Session = Depends(get_db)):
+    from sqlalchemy import func
+    company = db.execute(
+        select(models.Company).where(func.lower(models.Company.name) == name.strip().lower())
+    ).scalar_one_or_none()
+    if not company:
+        raise HTTPException(status_code=404, detail="Company not found")
+    if company.status != "Active":
+        raise HTTPException(status_code=400, detail=f"Company status is '{company.status}'. Please contact support.")
+    return {"id": company.id, "name": company.name, "status": company.status}
+
+@router.post("/register-pending", status_code=status.HTTP_201_CREATED)
+def register_pending_employee(
+    payload: schemas.EmployeeRegister,
+    db: Session = Depends(get_db)
+):
+    company = crud.get_company_by_id(db, company_id=payload.company_id)
+    if not company:
+        raise HTTPException(status_code=404, detail="Company not found")
+        
+    existing_emp_email = db.execute(
+        select(models.Employee).where(models.Employee.email == payload.email)
+    ).scalar_one_or_none()
+    if existing_emp_email:
+        raise HTTPException(status_code=400, detail="Employee email already exists")
+
+    existing_emp_id = db.execute(
+        select(models.Employee).where(
+            and_(
+                models.Employee.employee_id == payload.employee_id,
+                models.Employee.company_id == payload.company_id
+            )
+        )
+    ).scalar_one_or_none()
+    if existing_emp_id:
+        raise HTTPException(status_code=400, detail="Employee ID already registered under this company")
+
+    existing_user = crud.get_user_by_email(db, email=payload.email)
+    if existing_user:
+        raise HTTPException(status_code=400, detail="User account with this email already exists")
+
+    role = db.execute(select(models.Role).where(models.Role.name == "Employee")).scalar_one_or_none()
+    if not role:
+        raise HTTPException(status_code=500, detail="Employee role not found in system database")
+        
+    user_create = schemas.UserCreate(
+        email=payload.email,
+        password=payload.password,
+        role_id=role.id
+    )
+    db_user = crud.create_user(db, user=user_create, company_id=payload.company_id)
+    db_user.is_active = False
+    db.commit()
+
+    db_emp = models.Employee(
+        employee_id=payload.employee_id,
+        name=payload.name,
+        email=payload.email,
+        phone=payload.phone,
+        designation=payload.designation,
+        status="Pending Approval",
+        user_id=db_user.id,
+        company_id=payload.company_id
+    )
+    db.add(db_emp)
+    db.commit()
+    db.refresh(db_emp)
+    
+    return {
+        "message": "Registration successful. Please complete your facial scans next.",
+        "employee_id": db_emp.id,
+        "employee_uuid": db_emp.employee_id
+    }
+
+@router.post("/self-onboard/upload")
+async def self_onboard_upload(
+    request: Request,
+    employee_id: int = Form(...),
+    pose_type: str = Form(...),
+    file: UploadFile = File(...),
+    db: Session = Depends(get_db)
+):
+    employee = crud.get_employee_by_id(db, id=employee_id)
+    if not employee:
+        raise HTTPException(status_code=404, detail="Employee not found")
+        
+    if employee.status != "Pending Approval":
+        raise HTTPException(status_code=403, detail="Biometric enrollment is locked for active accounts. Please log in.")
+        
+    try:
+        contents = await file.read()
+        if not contents:
+            raise HTTPException(status_code=400, detail="Received empty file. No image data was sent.")
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=f"Invalid image file: {str(e)}")
+
+    from app.api.v1.enrollment import enroll_employee_face_pose
+    return enroll_employee_face_pose(
+        db=db,
+        employee=employee,
+        pose_type=pose_type,
+        contents=contents,
+        ip_address=request.client.host if request.client else None,
+        user_agent=request.headers.get("user-agent"),
+        creator_user_id=None
+    )

backend/app/api/v1/companies.py

@@ -45,6 +45,26 @@ def create_company(
         raise HTTPException(status_code=400, detail="Company name already exists")
     
     db_company = crud.create_company(db, company=company)
+    
+    # Create Company Admin User if email is provided
+    if company.admin_email:
+        existing_user = crud.get_user_by_email(db, company.admin_email)
+        if not existing_user:
+            admin_role = crud.get_role_by_name(db, "Admin")
+            if admin_role:
+                from app.core.security import get_password_hash
+                password_to_use = company.admin_password if company.admin_password else "Admin@NetraID2026"
+                hashed_pwd = get_password_hash(password_to_use)
+                new_admin = models.User(
+                    email=company.admin_email,
+                    hashed_password=hashed_pwd,
+                    role_id=admin_role.id,
+                    company_id=db_company.id,
+                    is_active=True if company.status == "Active" else False
+                )
+                db.add(new_admin)
+                db.commit()
+
     crud.create_audit_log(
         db=db,
         user_id=current_user.id,
@@ -70,6 +90,17 @@ def update_company(
     old_status = db_company.status
     updated = crud.update_company(db, company_id=id, company=company)
     
+    # Auto-activate administrators if company is marked Active
+    if company.status == "Active" and old_status != "Active":
+        from sqlalchemy import select
+        users_to_activate = db.execute(
+            select(models.User).where(models.User.company_id == id)
+        ).scalars().all()
+        for u in users_to_activate:
+            if u.role and u.role.name in ["Admin", "HR"]:
+                u.is_active = True
+        db.commit()
+        
     details = f"Updated company ID: {id}."
     if company.status and company.status != old_status:
         details += f" Status changed from '{old_status}' to '{company.status}'."

backend/app/api/v1/departments.py

@@ -1,6 +1,6 @@
 from fastapi import APIRouter, Depends, HTTPException, status, Request
 from sqlalchemy.orm import Session
-from typing import List
+from typing import List, Optional
 
 from app.core.database import get_db
 from app.core import security
@@ -18,10 +18,12 @@ checker_manage = security.RoleChecker(["Super Admin", "Admin"])
 def read_departments(
     skip: int = 0,
     limit: int = 100,
+    company_id: Optional[int] = None,
     db: Session = Depends(get_db),
     current_user: models.User = Depends(checker_view)
 ):
-    return crud.get_departments(db, company_id=current_user.company_id, skip=skip, limit=limit)
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
+    return crud.get_departments(db, company_id=target_company_id, skip=skip, limit=limit)
 
 @router.get("/{id}", response_model=schemas.DepartmentOut)
 def read_department(

backend/app/api/v1/devices.py

@@ -0,0 +1,63 @@
+from fastapi import APIRouter, Depends, HTTPException, status, Request
+from sqlalchemy.orm import Session
+from typing import List, Optional
+
+from app.core.database import get_db
+from app.core import security
+from app.crud import crud
+from app.schemas import schemas
+from app.models import models
+
+router = APIRouter()
+checker_staff = security.RoleChecker(["Super Admin", "Admin", "HR"])
+
+@router.get("/", response_model=List[schemas.DeviceOut])
+def read_devices(
+    company_id: Optional[int] = None,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_staff)
+):
+    role_name = current_user.role.name if current_user.role else "Employee"
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
+    if role_name == "Super Admin" and target_company_id is None:
+        return crud.get_devices(db)
+    return crud.get_devices(db, company_id=target_company_id)
+
+@router.post("/", response_model=schemas.DeviceOut, status_code=status.HTTP_201_CREATED)
+def register_device(
+    request: Request,
+    device: schemas.DeviceCreate,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin", "Admin"]))
+):
+    company_id = current_user.company_id
+    db_device = crud.create_device(db, device=device, company_id=company_id)
+    
+    crud.create_audit_log(
+        db=db,
+        user_id=current_user.id,
+        action="Register Kiosk Device",
+        ip_address=request.client.host if request.client else None,
+        user_agent=request.headers.get("user-agent"),
+        details=f"Registered kiosk device '{device.name}' in branch '{device.branch}'",
+        company_id=company_id
+    )
+    return db_device
+
+@router.put("/{id}", response_model=schemas.DeviceOut)
+def update_device_metrics(
+    id: int,
+    payload: schemas.DeviceUpdate,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.get_current_user)
+):
+    db_device = crud.get_device_by_id(db, device_id=id)
+    if not db_device:
+        raise HTTPException(status_code=404, detail="Device not found")
+        
+    # Check permissions
+    if current_user.role.name != "Super Admin" and db_device.company_id != current_user.company_id:
+        raise HTTPException(status_code=403, detail="Not authorized to configure this device")
+        
+    updated = crud.update_device(db, device_id=id, device_update=payload)
+    return updated

backend/app/api/v1/employees.py

@@ -25,11 +25,13 @@ def read_employees(
     search: Optional[str] = None,
     department_id: Optional[int] = None,
     status: Optional[str] = None,
+    company_id: Optional[int] = None,
     db: Session = Depends(get_db),
     current_user: models.User = Depends(checker_view)
 ):
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
     return crud.get_employees(
-        db, company_id=current_user.company_id, skip=skip, limit=limit, search=search, department_id=department_id, status=status
+        db, company_id=target_company_id, skip=skip, limit=limit, search=search, department_id=department_id, status=status
     )
 
 @router.get("/count")
@@ -37,12 +39,107 @@ def get_employee_count(
     search: Optional[str] = None,
     department_id: Optional[int] = None,
     status: Optional[str] = None,
+    company_id: Optional[int] = None,
     db: Session = Depends(get_db),
     current_user: models.User = Depends(checker_view)
 ):
-    count = crud.count_employees(db, company_id=current_user.company_id, search=search, department_id=department_id, status=status)
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
+    count = crud.count_employees(db, company_id=target_company_id, search=search, department_id=department_id, status=status)
     return {"count": count}
 
+
+# --- Leave Requests Endpoints ---
+
+@router.get("/leaves", response_model=List[schemas.LeaveRequestOut])
+def list_leaves(
+    employee_id: Optional[int] = None,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin", "Admin", "HR", "Employee"]))
+):
+    if current_user.role.name == "Employee":
+        if not current_user.employee:
+            raise HTTPException(status_code=400, detail="User is not linked to an employee profile")
+        target_employee_id = current_user.employee.id
+    else:
+        target_employee_id = employee_id
+
+    if target_employee_id:
+        emp = crud.get_employee_by_id(db, target_employee_id)
+        if not emp or (current_user.company_id is not None and emp.company_id != current_user.company_id):
+            raise HTTPException(status_code=404, detail="Employee not found")
+        return crud.get_leave_requests(db, employee_id=target_employee_id)
+    
+    leaves = crud.get_leave_requests(db)
+    if current_user.company_id is not None:
+        leaves = [l for l in leaves if l.employee and l.employee.company_id == current_user.company_id]
+    return leaves
+
+
+@router.post("/leaves", response_model=schemas.LeaveRequestOut, status_code=status.HTTP_201_CREATED)
+def apply_leave(
+    req: schemas.LeaveRequestCreate,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin", "Admin", "HR", "Employee"]))
+):
+    if current_user.role.name == "Employee":
+        if not current_user.employee:
+            raise HTTPException(status_code=400, detail="User is not linked to an employee profile")
+        if req.employee_id != current_user.employee.id:
+            raise HTTPException(status_code=403, detail="You can only apply leave for yourself")
+    else:
+        emp = crud.get_employee_by_id(db, req.employee_id)
+        if not emp or (current_user.company_id is not None and emp.company_id != current_user.company_id):
+            raise HTTPException(status_code=404, detail="Employee not found")
+
+    return crud.create_leave_request(db, req, employee_id=req.employee_id)
+
+
+@router.put("/leaves/{id}", response_model=schemas.LeaveRequestOut)
+def update_leave(
+    id: int,
+    data: schemas.LeaveRequestUpdate,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin", "Admin", "HR"]))
+):
+    db_req = db.get(models.LeaveRequest, id)
+    if not db_req:
+        raise HTTPException(status_code=404, detail="Leave request not found")
+        
+    emp = crud.get_employee_by_id(db, db_req.employee_id)
+    if not emp or (current_user.company_id is not None and emp.company_id != current_user.company_id):
+        raise HTTPException(status_code=403, detail="Access denied")
+
+    updated = crud.update_leave_status(db, id=id, status=data.status, admin_user_id=current_user.id)
+    if not updated:
+      raise HTTPException(status_code=404, detail="Leave request not found")
+    return updated
+
+
+@router.delete("/leaves/{id}", status_code=status.HTTP_204_NO_CONTENT)
+def delete_leave(
+    id: int,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin", "Admin", "HR", "Employee"]))
+):
+    db_req = db.get(models.LeaveRequest, id)
+    if not db_req:
+        raise HTTPException(status_code=404, detail="Leave request not found")
+        
+    if current_user.role.name == "Employee":
+        if not current_user.employee or db_req.employee_id != current_user.employee.id:
+            raise HTTPException(status_code=403, detail="You can only withdraw your own leave requests")
+        if db_req.status != "Pending":
+            raise HTTPException(status_code=400, detail="You can only withdraw pending leave requests")
+    else:
+        emp = crud.get_employee_by_id(db, db_req.employee_id)
+        if not emp or (current_user.company_id is not None and emp.company_id != current_user.company_id):
+            raise HTTPException(status_code=403, detail="Access denied")
+            
+    db.delete(db_req)
+    db.commit()
+    return None
+
+
 @router.get("/{id}", response_model=schemas.EmployeeOut)
 def read_employee(
     id: int,
@@ -152,6 +249,13 @@ def update_employee(
     updated = crud.update_employee(db, id=id, emp=emp)
     if not updated:
         raise HTTPException(status_code=404, detail="Employee not found")
+
+    if emp.status is not None and db_emp.user_id:
+        db_user = db.get(models.User, db_emp.user_id)
+        if db_user:
+            db_user.is_active = (emp.status == "Active")
+            db.add(db_user)
+            db.commit()
         
     crud.create_audit_log(
         db=db,
@@ -338,3 +442,4 @@ async def upload_avatar(
     )
     
     return {"message": "Avatar uploaded successfully"}
+

backend/app/api/v1/enrollment.py

@@ -18,42 +18,20 @@ router = APIRouter()
 
 checker_manage = security.RoleChecker(["Super Admin", "Admin", "HR"])
 
-@router.post("/upload")
-async def upload_face_image(
-    request: Request,
-    employee_id: int = Form(...),
-    pose_type: str = Form(...), # e.g., front, left, right, up, down, smile, neutral, glasses
-    file: UploadFile = File(...),
-    db: Session = Depends(get_db),
-    current_user: models.User = Depends(checker_manage)
+def enroll_employee_face_pose(
+    db: Session,
+    employee: models.Employee,
+    pose_type: str,
+    contents: bytes,
+    ip_address: str = None,
+    user_agent: str = None,
+    creator_user_id: int = None
 ):
-    # Validate employee exists
-    employee = crud.get_employee_by_id(db, id=employee_id)
-    if not employee:
-        all_emps = db.query(models.Employee).all()
-        emp_ids = [e.id for e in all_emps]
-        emp_uuids = [e.employee_id for e in all_emps]
-        raise HTTPException(
-            status_code=404,
-            detail=f"Employee not found. Received employee_id: {employee_id} (type: {type(employee_id).__name__}). Existing PK IDs: {emp_ids}, String IDs: {emp_uuids}"
-        )
-        
-    # Read file bytes
-    try:
-        contents = await file.read()
-        if not contents:
-            raise HTTPException(status_code=400, detail="Received empty file. No image data was sent.")
-        nparr = np.frombuffer(contents, np.uint8)
-        img = cv2.imdecode(nparr, cv2.IMREAD_COLOR)
-        if img is None:
-            raise HTTPException(status_code=400, detail="OpenCV failed to decode the image. The format might be unsupported.")
-    except HTTPException as e:
-        raise e
-    except Exception as e:
-        logger.error(f"Image decode failed: {e}")
-        raise HTTPException(status_code=400, detail=f"Invalid image file format: {str(e)}")
+    nparr = np.frombuffer(contents, np.uint8)
+    img = cv2.imdecode(nparr, cv2.IMREAD_COLOR)
+    if img is None:
+        raise HTTPException(status_code=400, detail="OpenCV failed to decode the image. The format might be unsupported.")
 
-    # Detect faces
     faces = face_engine.detect_faces(img)
     if not faces:
         logger.error("No face detected in the image.")
@@ -62,22 +40,18 @@ async def upload_face_image(
         logger.error("Multiple faces detected in the image.")
         raise HTTPException(status_code=400, detail="Multiple faces detected. Please ensure only one person is in the frame.")
         
-    # Process face
     face = faces[0]
     confidence = face["confidence"]
     
-    # Check if confidence is high enough
     if confidence < 0.5:
         logger.error(f"Face detection confidence too low: {confidence:.2f}")
         raise HTTPException(status_code=400, detail=f"Face detection confidence too low ({confidence:.2f}). Please upload a clearer image.")
 
-    # Image Quality Validation
     quality = face_engine.validate_image_quality(img)
     if not quality["is_valid"]:
         logger.error(f"Image quality validation failed: {quality['reason']}")
         raise HTTPException(status_code=400, detail=f"Image Quality Error: {quality['reason']}")
 
-    # Optional liveness check on enrollment (preventing enroll spoofing)
     liveness_enabled_setting = crud.get_setting_by_key(db, "ENROLLMENT_LIVENESS_CHECK")
     liveness_enabled = liveness_enabled_setting.value.lower() == "true" if liveness_enabled_setting else True
 
@@ -86,13 +60,9 @@ async def upload_face_image(
 
     liveness_score, is_live = face_engine.check_liveness(img, face["bbox"], threshold=liveness_threshold)
     
-    # In enrollment we want to prevent spoofing. However, liveness models are calibrated for direct frontal views.
-    # Profile/tilted views (left, right, up, down) often yield lower liveness scores and cause false rejections.
-    # Therefore, we strictly enforce liveness on the "front" pose only, and bypass it for other poses.
     if liveness_enabled and not is_live and not face_engine.mock_mode:
         if pose_type.strip().lower() == "front":
             logger.warning(f"Liveness check failed ({liveness_score:.2f}) on FRONT pose. Bypassing for now.")
-            # raise HTTPException(status_code=400, detail=f"Liveness check failed ({liveness_score:.2f}). Please upload a real photo.")
         else:
             logger.warning(
                 f"Liveness check failed during enrollment for non-frontal pose '{pose_type}' "
@@ -100,32 +70,23 @@ async def upload_face_image(
                 f"Bypassing check to prevent false rejection."
             )
 
-    # Align face (112x112)
     aligned_face = face_engine.align_face(img, face["landmarks"])
-    
-    # Generate 512-D embedding
     embedding = face_engine.extract_embedding(aligned_face)
     
-    # Save image to disk
     emp_upload_dir = os.path.join(settings.UPLOAD_DIR, str(employee.employee_id))
     os.makedirs(emp_upload_dir, exist_ok=True)
     
-    # Save the raw uploaded photo (or aligned photo, raw photo is better for archive)
     filename = f"{pose_type.replace(' ', '_').lower()}.jpg"
     dest_path = os.path.join(emp_upload_dir, filename)
     
-    # Save the file (we compress/save as JPG)
     cv2.imwrite(dest_path, img)
     
-    # Check if this pose already exists for the employee, delete it if it does
-    # (to allow re-enrolling a specific pose)
     for existing_img in employee.images:
         if existing_img.pose_type == pose_type:
             db.delete(existing_img)
             
     db.commit()
 
-    # Save EmployeeImage
     db_img = crud.save_employee_image(
         db=db,
         employee_id=employee.id,
@@ -134,28 +95,27 @@ async def upload_face_image(
         image_bytes=contents
     )
     
-    # Save FaceEmbedding (convert numpy array to python list)
     embedding_list = embedding.tolist()
-    db_emb = crud.save_face_embedding(
+    crud.save_face_embedding(
         db=db,
         employee_id=employee.id,
         image_id=db_img.id,
         embedding=embedding_list
     )
     
-    # Invalidate face engine embeddings cache
     face_engine.invalidate_cache()
     
-    # Log Audit
-    crud.create_audit_log(
-        db=db,
-        user_id=current_user.id,
-        action="Enroll Face Pose",
-        ip_address=request.client.host if request.client else None,
-        user_agent=request.headers.get("user-agent"),
-        details=f"Enrolled pose '{pose_type}' for employee ID: {employee.employee_id}"
-    )
-    
+    audit_user_id = creator_user_id or employee.user_id
+    if audit_user_id:
+        crud.create_audit_log(
+            db=db,
+            user_id=audit_user_id,
+            action="Enroll Face Pose",
+            ip_address=ip_address,
+            user_agent=user_agent,
+            details=f"Enrolled pose '{pose_type}' for employee ID: {employee.employee_id}"
+        )
+        
     return {
         "message": f"Successfully enrolled pose '{pose_type}' for employee {employee.name}",
         "pose_type": pose_type,
@@ -164,19 +124,69 @@ async def upload_face_image(
         "image_id": db_img.id
     }
 
+@router.post("/upload")
+async def upload_face_image(
+    request: Request,
+    employee_id: int = Form(...),
+    pose_type: str = Form(...), # e.g., front, left, right, up, down, smile, neutral, glasses
+    file: UploadFile = File(...),
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_manage)
+):
+    employee = crud.get_employee_by_id(db, id=employee_id)
+    if not employee:
+        raise HTTPException(status_code=404, detail="Employee not found")
+        
+    try:
+        contents = await file.read()
+        if not contents:
+            raise HTTPException(status_code=400, detail="Received empty file. No image data was sent.")
+    except Exception as e:
+        raise HTTPException(status_code=400, detail=f"Invalid image file: {str(e)}")
+
+    return enroll_employee_face_pose(
+        db=db,
+        employee=employee,
+        pose_type=pose_type,
+        contents=contents,
+        ip_address=request.client.host if request.client else None,
+        user_agent=request.headers.get("user-agent"),
+        creator_user_id=current_user.id
+    )
+
 @router.get("/status/{employee_id}")
 def get_enrollment_status(
+    request: Request,
     employee_id: int,
-    db: Session = Depends(get_db),
-    current_user: models.User = Depends(checker_manage)
+    db: Session = Depends(get_db)
 ):
     employee = crud.get_employee_by_id(db, id=employee_id)
     if not employee:
         raise HTTPException(status_code=404, detail="Employee not found")
         
+    auth_header = request.headers.get("Authorization")
+    current_user = None
+    if auth_header and auth_header.startswith("Bearer "):
+        token = auth_header.split(" ")[1]
+        try:
+            current_user = security.get_current_user_from_token(token, db)
+        except Exception:
+            pass
+
+    if current_user is None:
+        if employee.status != "Pending Approval":
+            raise HTTPException(status_code=403, detail="Access denied")
+    else:
+        user_role = current_user.role.name
+        if user_role not in ["Super Admin", "Admin", "HR"]:
+            if user_role == "Employee":
+                if not current_user.employee or current_user.employee.id != employee_id:
+                    raise HTTPException(status_code=403, detail="Access denied")
+            else:
+                raise HTTPException(status_code=403, detail="Access denied")
+        
     poses = [img.pose_type for img in employee.images]
     
-    # Required poses list
     required_poses = [
         "front", "left", "right", "up", "down", 
         "smile", "neutral", "indoor", "outdoor"
@@ -185,7 +195,8 @@ def get_enrollment_status(
     missing_poses = [p for p in required_poses if p not in [x.lower() for x in poses]]
     
     return {
-        "employee_id": employee.employee_id,
+        "employee_id": employee.id,
+        "employee_uuid": employee.employee_id,
         "name": employee.name,
         "total_enrolled": len(poses),
         "enrolled_poses": poses,
@@ -218,3 +229,46 @@ def delete_all_enrollments(
     )
     
     return {"message": "All face enrollments and images cleared successfully"}
+
+@router.delete("/{employee_id}/pose/{pose_type}")
+def delete_single_pose(
+    request: Request,
+    employee_id: int,
+    pose_type: str,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_manage)
+):
+    employee = crud.get_employee_by_id(db, id=employee_id)
+    if not employee:
+        raise HTTPException(status_code=404, detail="Employee not found")
+        
+    pose_img = next((img for img in employee.images if img.pose_type.lower() == pose_type.lower()), None)
+    if not pose_img:
+        raise HTTPException(status_code=404, detail=f"Pose '{pose_type}' not found for this employee")
+        
+    db.execute(
+        models.FaceEmbedding.__table__.delete().where(
+            models.FaceEmbedding.image_id == pose_img.id
+        )
+    )
+    db.delete(pose_img)
+    db.commit()
+    
+    face_engine.invalidate_cache()
+    
+    try:
+        if os.path.exists(pose_img.file_path):
+            os.remove(pose_img.file_path)
+    except Exception as e:
+        logger.warning(f"Could not remove physical file {pose_img.file_path}: {e}")
+        
+    crud.create_audit_log(
+        db=db,
+        user_id=current_user.id,
+        action="Clear Single Pose",
+        ip_address=request.client.host if request.client else None,
+        user_agent=request.headers.get("user-agent"),
+        details=f"Cleared pose '{pose_type}' for employee ID: {employee.employee_id}"
+    )
+    
+    return {"message": f"Pose '{pose_type}' cleared successfully"}

backend/app/api/v1/kiosk.py

@@ -7,7 +7,7 @@ import base64
 import cv2
 import numpy as np
 import logging
-from datetime import datetime, time
+from datetime import datetime, time, timedelta
 import urllib.parse
 
 from app.core.database import get_db
@@ -18,6 +18,7 @@ from app.schemas import schemas
 from app.models import models
 from app.services.singletons import face_engine
 from app.services import geocoding, voice_assistant
+from app.core.attendance_policy import AttendancePolicyEngine
 
 logger = logging.getLogger("Kiosk")
 router = APIRouter()
@@ -77,14 +78,25 @@ def calculate_distance_meters(lat1: float, lon1: float, lat2: float, lon2: float
     c = 2.0 * math.atan2(math.sqrt(a), math.sqrt(1.0 - a))
     return R * c
 
+from pydantic import BaseModel, Field, validator
+
 class KioskScanRequest(BaseModel):
-    image: str = Field(..., description="Base64 encoded image frame (JPEG/PNG data URL)")
+    image: Optional[str] = Field(None, description="Base64 encoded image frame (JPEG/PNG data URL)")
     camera: str = Field("Main Kiosk", description="Identifier of the kiosk scanner device")
     confirm_checkout: bool = Field(False, description="Whether the check-out is confirmed by the employee")
     qr_code: str = Field(None, description="Pre-detected QR code string from frontend")
     qr_only: bool = Field(False, description="If True, only allow QR-based logging and disable face recognition")
     latitude: Optional[float] = Field(None, description="Latitude of the kiosk/device marking attendance")
     longitude: Optional[float] = Field(None, description="Longitude of the kiosk/device marking attendance")
+    employee_id: Optional[int] = Field(None, description="Employee ID for dummy bypass scans")
+    dummy: Optional[bool] = Field(False, description="Whether to bypass AI face scan (for employee dashboard dummy mode)")
+
+    @validator("image")
+    def validate_image_payload(cls, v):
+        if v and len(v) > 20 * 1024 * 1024:  # ~15MB raw image cap
+            raise ValueError("Image payload size exceeds maximum limit of 15MB")
+        return v
+
 
 
 @router.get("/config")
@@ -111,7 +123,9 @@ def scan_face(
     payload: KioskScanRequest,
     db: Session = Depends(get_db)
 ):
-    now = datetime.now()
+    from datetime import timedelta
+    now_utc = datetime.utcnow()
+    now = now_utc + timedelta(hours=5, minutes=30)
     # Retrieve dynamic thresholds from database settings
     face_threshold_setting = crud.get_setting_by_key(db, "KIOSK_FACE_THRESHOLD")
     liveness_threshold_setting = crud.get_setting_by_key(db, "KIOSK_LIVENESS_THRESHOLD")
@@ -137,266 +151,258 @@ def scan_face(
     liveness_threshold = float(liveness_threshold_setting.value) if liveness_threshold_setting else settings.KIOSK_LIVENESS_THRESHOLD
     voice_enabled = voice_greeting_setting.value.lower() == "true" if voice_greeting_setting else True
 
-    # 1. Parse base64 image
-    try:
-        header, encoded = payload.image.split(",", 1) if "," in payload.image else ("", payload.image)
-        img_bytes = base64.b64decode(encoded)
-        nparr = np.frombuffer(img_bytes, np.uint8)
-        img = cv2.imdecode(nparr, cv2.IMREAD_COLOR)
-        if img is None:
-            raise ValueError()
-            
-        # Fast downscale for performance
-        scale_factor = 1.0
-        max_dim = 640
-        h, w = img.shape[:2]
-        if max(h, w) > max_dim:
-            scale_factor = max_dim / max(h, w)
-            img = cv2.resize(img, (int(w * scale_factor), int(h * scale_factor)), interpolation=cv2.INTER_AREA)
-    except Exception:
-        raise HTTPException(status_code=400, detail="Invalid Base64 image data")
-
-    qr_employee = None
-    is_qr_scan = False
+    employee = None
+    similarity = 1.0
+    liveness_score = 1.0
+    confidence = 1.0
+    log_status_success = "Match Success"
     bbox_list = None
 
-    # Check if qr_code was pre-detected by the frontend
-    if getattr(payload, "qr_code", None):
-        qr_val = payload.qr_code.strip()
-        qr_employee = db.query(models.Employee).filter(
-            models.Employee.employee_id == qr_val
-        ).first()
-        if qr_employee:
-            is_qr_scan = True
-            logger.info(f"QR code pre-detected by frontend: {qr_employee.employee_id}")
-
-    if not is_qr_scan:
-        try:
-            qr_detector = cv2.QRCodeDetector()
-            qr_val, _, _ = qr_detector.detectAndDecode(img)
-            if qr_val:
-                qr_val = qr_val.strip()
-                qr_employee = db.query(models.Employee).filter(
-                    models.Employee.employee_id == qr_val
-                ).first()
-                if qr_employee:
-                    is_qr_scan = True
-                    logger.info(f"QR code scanned successfully for employee: {qr_employee.employee_id}")
-        except Exception as qr_err:
-            logger.warning(f"QR code parsing error: {qr_err}")
-
-    if is_qr_scan:
-        employee = qr_employee
-        similarity = 1.0
-        liveness_score = 1.0
-        confidence = 1.0
-        log_status_success = "Match Success (QR Scanned)"
-    else:
-        if getattr(payload, "qr_only", False):
+    if payload.dummy and payload.employee_id:
+        employee = crud.get_employee_by_id(db, payload.employee_id)
+        if not employee:
             return {
                 "status": "unknown",
-                "message": "Invalid QR code. Employee badge not found.",
-                "should_retry": True
-            }
-        # 2. Detect face
-        faces = face_engine.detect_faces(img)
-        if not faces:
-            return {
-                "status": "no_face",
-                "message": "No face detected. Frame your face within the scanner.",
-                "should_retry": True
+                "message": "Employee not found.",
+                "should_retry": False
             }
-        if len(faces) > 1:
-            return {
-                "status": "multiple_faces",
-                "message": "Multiple faces detected. Please scan one person at a time.",
-                "should_retry": True
-            }
-            
-        face = faces[0]
-        bbox = face["bbox"]
-        
-        # Scale bbox back to original image size for frontend drawing
-        if scale_factor != 1.0:
-            bbox_list = [float(x) / scale_factor for x in bbox]
+        log_status_success = "Dummy Scanner Success"
+    else:
+        # 1. Parse base64 image
+        if not payload.image:
+            raise HTTPException(status_code=400, detail="Image payload is required for non-dummy scans")
+        try:
+            header, encoded = payload.image.split(",", 1) if "," in payload.image else ("", payload.image)
+            img_bytes = base64.b64decode(encoded)
+            nparr = np.frombuffer(img_bytes, np.uint8)
+            img = cv2.imdecode(nparr, cv2.IMREAD_COLOR)
+            if img is None:
+                raise ValueError()
+                
+            # Fast downscale for performance
+            scale_factor = 1.0
+            max_dim = 640
+            h, w = img.shape[:2]
+            if max(h, w) > max_dim:
+                scale_factor = max_dim / max(h, w)
+                img = cv2.resize(img, (int(w * scale_factor), int(h * scale_factor)), interpolation=cv2.INTER_AREA)
+        except Exception:
+            raise HTTPException(status_code=400, detail="Invalid Base64 image data")
+
+        qr_employee = None
+        is_qr_scan = False
+
+        # Check if qr_code was pre-detected by the frontend
+        if getattr(payload, "qr_code", None):
+            qr_val = payload.qr_code.strip()
+            qr_employee = db.query(models.Employee).filter(
+                models.Employee.employee_id == qr_val
+            ).first()
+            if qr_employee:
+                is_qr_scan = True
+                logger.info(f"QR code pre-detected by frontend: {qr_employee.employee_id}")
+
+        if not is_qr_scan:
+            try:
+                qr_detector = cv2.QRCodeDetector()
+                qr_val, _, _ = qr_detector.detectAndDecode(img)
+                if qr_val:
+                    qr_val = qr_val.strip()
+                    qr_employee = db.query(models.Employee).filter(
+                        models.Employee.employee_id == qr_val
+                    ).first()
+                    if qr_employee:
+                        is_qr_scan = True
+                        logger.info(f"QR code scanned successfully for employee: {qr_employee.employee_id}")
+            except Exception as qr_err:
+                logger.warning(f"QR code parsing error: {qr_err}")
+
+        if is_qr_scan:
+            employee = qr_employee
+            similarity = 1.0
+            liveness_score = 1.0
+            confidence = 1.0
+            log_status_success = "Match Success (QR Scanned)"
         else:
-            bbox_list = [float(x) for x in bbox]
+            if getattr(payload, "qr_only", False):
+                return {
+                    "status": "unknown",
+                    "message": "Invalid QR code. Employee badge not found.",
+                    "should_retry": True
+                }
+            # 2. Detect face
+            faces = face_engine.detect_faces(img)
+            if not faces:
+                return {
+                    "status": "no_face",
+                    "message": "No face detected. Frame your face within the scanner.",
+                    "should_retry": True
+                }
+            if len(faces) > 1:
+                return {
+                    "status": "multiple_faces",
+                    "message": "Multiple faces detected. Please scan one person at a time.",
+                    "should_retry": True
+                }
+                
+            face = faces[0]
+            bbox = face["bbox"]
             
-        confidence = face["confidence"]
-        landmarks = face["landmarks"]
-        
-        # 3. Liveness Check
-        liveness_score, is_live = face_engine.check_liveness(img, bbox, threshold=liveness_threshold)
-        if not is_live and not face_engine.mock_mode:
-            # Save spoof log
-            log_entry = crud.create_attendance_log(
-                db=db,
-                employee_id=None,
-                camera=payload.camera,
-                confidence=confidence,
-                liveness_score=liveness_score,
-                is_spoof=True,
-                status="Spoof Rejected",
-                timestamp=now,
-            location_text=location_text if 'location_text' in locals() else None,
-            latitude=payload.latitude if hasattr(payload, 'latitude') else None,
-            longitude=payload.longitude if hasattr(payload, 'longitude') else None
-            )
-            _publish_log(log_entry)
+            # Scale bbox back to original image size for frontend drawing
+            if scale_factor != 1.0:
+                bbox_list = [float(x) / scale_factor for x in bbox]
+            else:
+                bbox_list = [float(x) for x in bbox]
+                
+            confidence = face["confidence"]
+            landmarks = face["landmarks"]
             
-            # Dispatch Webhook alert
-            try:
-                from app.services.notifications import trigger_security_alert
-                trigger_security_alert(
+            # 3. Liveness Check
+            liveness_score, is_live = face_engine.check_liveness(img, bbox, threshold=liveness_threshold)
+            if not is_live and not face_engine.mock_mode:
+                # Save spoof log
+                log_entry = crud.create_attendance_log(
                     db=db,
-                    alert_type="Spoofing Attempt Rejected",
-                    details={
-                        "camera": payload.camera,
-                        "confidence": float(confidence),
-                        "liveness_score": float(liveness_score),
-                        "timestamp": now.strftime("%Y-%m-%d %H:%M:%S")
-                    }
+                    employee_id=None,
+                    camera=payload.camera,
+                    confidence=confidence,
+                    liveness_score=liveness_score,
+                    is_spoof=True,
+                    status="Spoof Rejected",
+                    timestamp=now_utc,
+                location_text=location_text if 'location_text' in locals() else None,
+                latitude=payload.latitude if hasattr(payload, 'latitude') else None,
+                longitude=payload.longitude if hasattr(payload, 'longitude') else None
                 )
-            except Exception as alert_err:
-                logger.error(f"Failed to dispatch security alert: {alert_err}")
-
-            return {
-                "status": "spoof_detected",
-                "message": "Liveness check failed! Verification denied.",
-                "confidence": float(confidence),
-                "liveness_score": float(liveness_score),
-                "should_retry": False,
-                "bbox": bbox_list
-            }
+                _publish_log(log_entry)
+                
+                # Dispatch Webhook alert
+                try:
+                    from app.services.notifications import trigger_security_alert
+                    trigger_security_alert(
+                        db=db,
+                        alert_type="Spoofing Attempt Rejected",
+                        details={
+                            "camera": payload.camera,
+                            "confidence": float(confidence),
+                            "liveness_score": float(liveness_score),
+                            "timestamp": now.strftime("%Y-%m-%d %H:%M:%S")
+                        }
+                    )
+                except Exception as alert_err:
+                    logger.error(f"Failed to dispatch security alert: {alert_err}")
 
-        # 4. Extract Embedding
-        aligned = face_engine.align_face(img, landmarks)
-        embedding = face_engine.extract_embedding(aligned)
-        
-        # 5. DB Matching: query pgvector if postgresql, else fallback to numpy cache-matching
-        match_result = None
-        is_pg = False
-        try:
-            is_pg = (db.bind.dialect.name == "postgresql")
-        except Exception as dialect_err:
-            logger.warning(f"Could not determine DB dialect: {dialect_err}")
+                return {
+                    "status": "spoof_detected",
+                    "message": "Liveness check failed! Verification denied.",
+                    "confidence": float(confidence),
+                    "liveness_score": float(liveness_score),
+                    "should_retry": False,
+                    "bbox": bbox_list
+                }
 
-        if is_pg:
+            # 4. Extract Embedding
+            aligned = face_engine.align_face(img, landmarks)
+            embedding = face_engine.extract_embedding(aligned)
+            
+            # 5. DB Matching: query pgvector if postgresql, else fallback to numpy cache-matching
+            match_result = None
+            is_pg = False
             try:
-                # Run database-level query using pgvector's cosine distance (<=>) operator
-                emb_list = embedding.tolist() if isinstance(embedding, np.ndarray) else list(embedding)
-                from sqlalchemy import type_coerce, Float
-                distance_expr = type_coerce(models.FaceEmbedding.embedding.op('<=>')(emb_list), Float).label('distance')
-                query_res = db.query(models.FaceEmbedding, distance_expr).order_by(distance_expr).limit(1).first()
-                if query_res:
-                    db_emb, distance = query_res
-                    match_result = (db_emb, float(distance))
-            except Exception as pg_err:
-                logger.error(f"Failed to query pgvector: {pg_err}. Falling back to SQLite/NumPy matching.")
-                match_result = None
-
-        if match_result is None:
-            if face_engine.embeddings_cache is None:
-                face_engine.load_embeddings_cache(db)
-                
-            all_embeddings = face_engine.embeddings_cache
-            if not all_embeddings:
-                match_result = None
-            else:
+                is_pg = (db.bind.dialect.name == "postgresql")
+            except Exception as dialect_err:
+                logger.warning(f"Could not determine DB dialect: {dialect_err}")
+
+            if is_pg:
                 try:
-                    # High-performance vectorized search using NumPy matrix multiplication.
-                    # ArcFace embeddings are L2-normalized, so cosine similarity is just the dot product.
-                    embeddings_matrix = np.stack([emb["embedding"] for emb in all_embeddings])  # shape (N, 512)
-                    similarities = np.dot(embeddings_matrix, embedding)  # shape (N,)
-                    best_idx = int(np.argmax(similarities))
-                    best_similarity = float(similarities[best_idx])
-                    
-                    best_emb_record = all_embeddings[best_idx]
-                    class MockEmb:
-                        id = best_emb_record["id"]
-                        employee_id = best_emb_record["employee_id"]
+                    emb_list = embedding.tolist() if isinstance(embedding, np.ndarray) else list(embedding)
+                    from sqlalchemy import type_coerce, Float
+                    distance_expr = type_coerce(models.FaceEmbedding.embedding.op('<=>')(emb_list), Float).label('distance')
+                    query_res = db.query(models.FaceEmbedding, distance_expr).order_by(distance_expr).limit(1).first()
+                    if query_res:
+                        db_emb, distance = query_res
+                        match_result = (db_emb, float(distance))
+                except Exception as pg_err:
+                    logger.error(f"Failed to query pgvector: {pg_err}. Falling back to SQLite/NumPy matching.")
+                    match_result = None
+
+            if match_result is None:
+                if face_engine.embeddings_cache is None:
+                    face_engine.load_embeddings_cache(db)
                     
-                    # distance = 1 - similarity
-                    best_dist = 1.0 - best_similarity
-                    match_result = (MockEmb(), best_dist)
-                except Exception as e:
-                    logger.error(f"Error in vectorized face matching: {e}")
+                all_embeddings = face_engine.embeddings_cache
+                if not all_embeddings:
                     match_result = None
-        
-        if not match_result:
-            # Database has no enrolled embeddings
-            log_entry = crud.create_attendance_log(
-                db=db,
-                employee_id=None,
-                camera=payload.camera,
-                confidence=confidence,
-                liveness_score=liveness_score,
-                is_spoof=False,
-                status="Empty Vector Index",
-                timestamp=now,
-            location_text=location_text if 'location_text' in locals() else None,
-            latitude=payload.latitude if hasattr(payload, 'latitude') else None,
-            longitude=payload.longitude if hasattr(payload, 'longitude') else None
-            )
-            _publish_log(log_entry)
-            return {
-                "status": "unknown",
-                "message": "No employees registered in the system. Please register first.",
-                "should_retry": False,
-                "bbox": bbox_list
-            }
+                else:
+                    try:
+                        embeddings_matrix = np.stack([emb["embedding"] for emb in all_embeddings])  # shape (N, 512)
+                        similarities = np.dot(embeddings_matrix, embedding)  # shape (N,)
+                        best_idx = int(np.argmax(similarities))
+                        best_similarity = float(similarities[best_idx])
+                        
+                        best_emb_record = all_embeddings[best_idx]
+                        class MockEmb:
+                            id = best_emb_record["id"]
+                            employee_id = best_emb_record["employee_id"]
+                        
+                        best_dist = 1.0 - best_similarity
+                        match_result = (MockEmb(), best_dist)
+                    except Exception as e:
+                        logger.error(f"Error in vectorized face matching: {e}")
+                        match_result = None
             
-        db_emb, distance = match_result
-        # Similarity = 1 - Distance
-        similarity = 1.0 - float(distance)
-        
-        employee = crud.get_employee_by_id(db, db_emb.employee_id) if db_emb else None
-        
-        if similarity < face_threshold:
-            qr_fallback_setting = crud.get_setting_by_key(db, "QR_FALLBACK_ENABLED")
-            qr_fallback_enabled = qr_fallback_setting.value.lower() == "true" if qr_fallback_setting else True
+            if not match_result:
+                log_entry = crud.create_attendance_log(
+                    db=db,
+                    employee_id=None,
+                    camera=payload.camera,
+                    confidence=confidence,
+                    liveness_score=liveness_score,
+                    is_spoof=False,
+                    status="Empty Vector Index",
+                    timestamp=now_utc,
+                location_text=location_text if 'location_text' in locals() else None,
+                latitude=payload.latitude if hasattr(payload, 'latitude') else None,
+                longitude=payload.longitude if hasattr(payload, 'longitude') else None
+                )
+                _publish_log(log_entry)
+                return {
+                    "status": "unknown",
+                    "message": "No employees registered in the system. Please register first.",
+                    "should_retry": False,
+                    "bbox": bbox_list
+                }
+                
+            db_emb, distance = match_result
+            similarity = 1.0 - float(distance)
             
-            if False:  # Disable automatic QR fallback on borderline match
+            employee = crud.get_employee_by_id(db, db_emb.employee_id) if db_emb else None
+            
+            if similarity < face_threshold:
+                log_entry = crud.create_attendance_log(
+                    db=db,
+                    employee_id=None,
+                    camera=payload.camera,
+                    confidence=similarity,
+                    liveness_score=liveness_score,
+                    is_spoof=False,
+                    status="Unknown Person",
+                    timestamp=now_utc,
+                location_text=location_text if 'location_text' in locals() else None,
+                latitude=payload.latitude if hasattr(payload, 'latitude') else None,
+                longitude=payload.longitude if hasattr(payload, 'longitude') else None
+                )
+                _publish_log(log_entry)
                 return {
-                    "status": "needs_qr",
-                    "message": "Face matched but requires identity verification. Please scan your employee QR code.",
-                    "employee": {
-                        "id": employee.id,
-                        "employee_id": employee.employee_id,
-                        "name": employee.name,
-                        "designation": employee.designation,
-                        "department": employee.department.name if employee.department else "General"
-                    },
+                    "status": "unknown",
+                    "message": "Face not recognized. Please try again or contact HR.",
                     "confidence": similarity,
                     "liveness_score": liveness_score,
-                    "should_retry": False,
+                    "should_retry": True,
                     "bbox": bbox_list
                 }
-                
-            # Low confidence match -> Unknown
-            log_entry = crud.create_attendance_log(
-                db=db,
-                employee_id=None,
-                camera=payload.camera,
-                confidence=similarity,
-                liveness_score=liveness_score,
-                is_spoof=False,
-                status="Unknown Person",
-                timestamp=now,
-            location_text=location_text if 'location_text' in locals() else None,
-            latitude=payload.latitude if hasattr(payload, 'latitude') else None,
-            longitude=payload.longitude if hasattr(payload, 'longitude') else None
-            )
-            _publish_log(log_entry)
-            return {
-                "status": "unknown",
-                "message": "Face not recognized. Please try again or contact HR.",
-                "confidence": similarity,
-                "liveness_score": liveness_score,
-                "should_retry": True,
-                "bbox": bbox_list
-            }
-        log_status_success = "Match Success"
+            log_status_success = "Match Success"
+
 
     if employee and employee.company and employee.company.status != "Active":
         return {
@@ -417,7 +423,7 @@ def scan_face(
             liveness_score=liveness_score,
             is_spoof=False,
             status="Inactive Employee Swiped",
-            timestamp=now,
+            timestamp=now_utc,
             location_text=location_text if 'location_text' in locals() else None,
             latitude=payload.latitude if hasattr(payload, 'latitude') else None,
             longitude=payload.longitude if hasattr(payload, 'longitude') else None
@@ -464,7 +470,7 @@ def scan_face(
                 db=db, employee_id=employee.id, camera=payload.camera,
                 confidence=similarity if 'similarity' in locals() else 1.0,
                 liveness_score=liveness_score if 'liveness_score' in locals() else 1.0,
-                is_spoof=False, status="WFH Location Missing", timestamp=now,
+                is_spoof=False, status="WFH Location Missing", timestamp=now_utc,
                 location_text=location_text, latitude=payload.latitude, longitude=payload.longitude
             )
             _publish_log(log_entry, employee)
@@ -490,7 +496,7 @@ def scan_face(
                     db=db, employee_id=employee.id, camera=payload.camera,
                     confidence=similarity if 'similarity' in locals() else 1.0,
                     liveness_score=liveness_score if 'liveness_score' in locals() else 1.0,
-                    is_spoof=False, status="Outside WFH Bounds", timestamp=now,
+                    is_spoof=False, status="Outside WFH Bounds", timestamp=now_utc,
                     location_text=location_text, latitude=payload.latitude, longitude=payload.longitude
                 )
                 _publish_log(log_entry, employee)
@@ -511,7 +517,7 @@ def scan_face(
                 liveness_score=liveness_score if 'liveness_score' in locals() else 1.0,
                 is_spoof=False,
                 status="Location Missing",
-                timestamp=now,
+                timestamp=now_utc,
                 location_text=location_text, latitude=payload.latitude, longitude=payload.longitude
             )
             _publish_log(log_entry, employee)
@@ -544,7 +550,7 @@ def scan_face(
                 liveness_score=liveness_score if 'liveness_score' in locals() else 1.0,
                 is_spoof=False,
                 status="Location Config Error",
-                timestamp=now,
+                timestamp=now_utc,
                 location_text=location_text, latitude=payload.latitude, longitude=payload.longitude
             )
             _publish_log(log_entry, employee)
@@ -565,7 +571,7 @@ def scan_face(
                 liveness_score=liveness_score if 'liveness_score' in locals() else 1.0,
                 is_spoof=False,
                 status="Outside Office Bounds",
-                timestamp=now,
+                timestamp=now_utc,
                 location_text=location_text, latitude=payload.latitude, longitude=payload.longitude
             )
             _publish_log(log_entry, employee)
@@ -621,20 +627,48 @@ def scan_face(
     )
     attendance_record = db.execute(stmt).scalars().first()
 
-    if not attendance_record:
+    if attendance_record and attendance_record.status == "On Leave":
+        log_entry = crud.create_attendance_log(
+            db=db,
+            employee_id=employee.id,
+            camera=payload.camera,
+            confidence=similarity,
+            liveness_score=liveness_score,
+            is_spoof=False,
+            status="Attendance Locked",
+            timestamp=now_utc,
+            location_text=location_text if 'location_text' in locals() else None,
+            latitude=payload.latitude if hasattr(payload, 'latitude') else None,
+            longitude=payload.longitude if hasattr(payload, 'longitude') else None
+        )
+        _publish_log(log_entry, employee)
+        return {
+            "status": "locked",
+            "message": f"Verification denied. {employee.name} is currently on approved leave today.",
+            "should_retry": False,
+            "bbox": bbox_list
+        }
+
+    if not attendance_record or attendance_record.check_in is None:
         # --- First scan of the day: Check-In ---
         check_in_deadline = datetime.combine(now.date(), shift_start) + timedelta(minutes=grace_mins)
         is_late = now > check_in_deadline
         status = "Late" if is_late else "Present"
 
-        attendance_record = models.Attendance(
-            employee_id=employee.id,
-            date=now.date(),
-            check_in=now,
-            late_arrival=is_late,
-            status=status
-        )
-        db.add(attendance_record)
+        if not attendance_record:
+            attendance_record = models.Attendance(
+                employee_id=employee.id,
+                date=now.date(),
+                check_in=now,
+                late_arrival=is_late,
+                status=status
+            )
+            db.add(attendance_record)
+        else:
+            attendance_record.check_in = now
+            attendance_record.late_arrival = is_late
+            attendance_record.status = status
+            
         db.commit()
         db.refresh(attendance_record)
 
@@ -647,7 +681,7 @@ def scan_face(
             liveness_score=liveness_score,
             is_spoof=False,
             status=log_status_success,
-            timestamp=now,
+            timestamp=now_utc,
             location_text=location_text,
             latitude=payload.latitude,
             longitude=payload.longitude
@@ -716,7 +750,7 @@ def scan_face(
                     liveness_score=liveness_score,
                     is_spoof=False,
                     status=log_status_success,
-                    timestamp=now,
+                    timestamp=now_utc,
             location_text=location_text if 'location_text' in locals() else None,
             latitude=payload.latitude if hasattr(payload, 'latitude') else None,
             longitude=payload.longitude if hasattr(payload, 'longitude') else None
@@ -774,7 +808,7 @@ def scan_face(
                     liveness_score=liveness_score,
                     is_spoof=False,
                     status="Attendance Locked",
-                    timestamp=now,
+                    timestamp=now_utc,
             location_text=location_text if 'location_text' in locals() else None,
             latitude=payload.latitude if hasattr(payload, 'latitude') else None,
             longitude=payload.longitude if hasattr(payload, 'longitude') else None
@@ -864,7 +898,7 @@ def scan_face(
                     liveness_score=liveness_score,
                     is_spoof=False,
                     status=log_status_success,
-                    timestamp=now,
+                    timestamp=now_utc,
             location_text=location_text if 'location_text' in locals() else None,
             latitude=payload.latitude if hasattr(payload, 'latitude') else None,
             longitude=payload.longitude if hasattr(payload, 'longitude') else None
@@ -960,7 +994,7 @@ def confirm_qr(
                 liveness_score=1.0,
                 is_spoof=False,
                 status="Location Missing (QR)",
-                timestamp=datetime.now()
+                timestamp=now_utc
             )
             raise HTTPException(status_code=400, detail="GPS coordinates are required to mark attendance.")
 
@@ -986,7 +1020,7 @@ def confirm_qr(
                 liveness_score=1.0,
                 is_spoof=False,
                 status="Location Config Error",
-                timestamp=datetime.now()
+                timestamp=now_utc
             )
             raise HTTPException(
                 status_code=status.HTTP_400_BAD_REQUEST,
@@ -1003,7 +1037,7 @@ def confirm_qr(
                 liveness_score=1.0,
                 is_spoof=False,
                 status="Outside Office Bounds (QR)",
-                timestamp=datetime.now()
+                timestamp=now_utc
             )
             raise HTTPException(status_code=400, detail=f"Outside allowed area. Distance: {dist:.1f}m. Max radius: {allowed_radius}m.")
         
@@ -1017,16 +1051,16 @@ def confirm_qr(
             liveness_score=1.0,
             is_spoof=False,
             status="QR Verification Failed",
-            timestamp=datetime.now()
+            timestamp=now_utc
         )
         _publish_log(log_entry, employee)
         raise HTTPException(status_code=400, detail="QR Code verification failed. Badge does not match matched face.")
         
-    now = datetime.now()
+    now_utc = datetime.utcnow(); now = now_utc + timedelta(hours=5, minutes=30)
     attendance_record = crud.mark_kiosk_attendance(
         db=db,
         employee_id=employee.id,
-        timestamp=now,
+        timestamp=now_utc,
         camera=payload.camera,
         confidence=1.0
     )
@@ -1039,9 +1073,9 @@ def confirm_qr(
         liveness_score=1.0,
         is_spoof=False,
         status="Match Success (QR Verified)",
-        timestamp=now,
-            location_text=location_text if 'location_text' in locals() else None,
-            latitude=payload.latitude if hasattr(payload, 'latitude') else None,
+        timestamp=now_utc,
+        location_text=None,
+        latitude=payload.latitude if hasattr(payload, 'latitude') else None,
             longitude=payload.longitude if hasattr(payload, 'longitude') else None
     )
     _publish_log(log_entry, employee)

backend/app/api/v1/notifications.py

@@ -0,0 +1,73 @@
+from fastapi import APIRouter, Depends, HTTPException, status, Request
+from sqlalchemy.orm import Session
+from typing import List, Optional
+
+from app.core.database import get_db
+from app.core import security
+from app.crud import crud
+from app.schemas import schemas
+from app.models import models
+
+router = APIRouter()
+
+@router.get("/", response_model=List[schemas.NotificationOut])
+def read_notifications(
+    is_read: Optional[bool] = None,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.get_current_user)
+):
+    return crud.get_notifications(
+        db, 
+        company_id=current_user.company_id, 
+        recipient_id=current_user.id, 
+        is_read=is_read
+    )
+
+@router.post("/", response_model=schemas.NotificationOut, status_code=status.HTTP_201_CREATED)
+def post_notification(
+    request: Request,
+    notification: schemas.NotificationCreate,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.RoleChecker(["Super Admin", "Admin", "HR"]))
+):
+    company_id = current_user.company_id
+    db_ntf = crud.create_notification(db, ntf=notification, company_id=company_id, sender_id=current_user.id)
+    
+    crud.create_audit_log(
+        db=db,
+        user_id=current_user.id,
+        action="Broadcast Notification",
+        ip_address=request.client.host if request.client else None,
+        user_agent=request.headers.get("user-agent"),
+        details=f"Posted notification: '{notification.title}' under category '{notification.category}'",
+        company_id=company_id
+    )
+    return db_ntf
+
+@router.put("/{id}/read", response_model=schemas.NotificationOut)
+def mark_read(
+    id: int,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.get_current_user)
+):
+    db_ntf = crud.get_notification_by_id(db, notification_id=id)
+    if not db_ntf:
+        raise HTTPException(status_code=404, detail="Notification not found")
+    if db_ntf.company_id != current_user.company_id or (db_ntf.recipient_id is not None and db_ntf.recipient_id != current_user.id):
+        raise HTTPException(status_code=403, detail="Not authorized to access this notification")
+        
+    return crud.mark_notification_read(db, notification_id=id)
+
+@router.put("/{id}/archive", response_model=schemas.NotificationOut)
+def archive_notification(
+    id: int,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.get_current_user)
+):
+    db_ntf = crud.get_notification_by_id(db, notification_id=id)
+    if not db_ntf:
+        raise HTTPException(status_code=404, detail="Notification not found")
+    if db_ntf.company_id != current_user.company_id or (db_ntf.recipient_id is not None and db_ntf.recipient_id != current_user.id):
+        raise HTTPException(status_code=403, detail="Not authorized to modify this notification")
+        
+    return crud.archive_notification(db, notification_id=id)

backend/app/api/v1/policy.py

@@ -0,0 +1,54 @@
+from fastapi import APIRouter, Depends, HTTPException, status, Request
+from sqlalchemy.orm import Session
+from typing import Dict, Any
+
+from app.core.database import get_db
+from app.core import security
+from app.crud import crud
+from app.models import models
+
+router = APIRouter()
+checker_admin = security.RoleChecker(["Super Admin", "Admin"])
+
+@router.get("/rules")
+def get_attendance_rules(
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_admin)
+):
+    company_id = current_user.company_id
+    threshold = crud.get_setting_by_key(db, "face_match_threshold", company_id)
+    lat = crud.get_setting_by_key(db, "office_latitude", company_id)
+    lng = crud.get_setting_by_key(db, "office_longitude", company_id)
+    radius = crud.get_setting_by_key(db, "geofence_radius_meters", company_id)
+    
+    return {
+        "face_match_threshold": float(threshold.value) if threshold else 0.6,
+        "office_latitude": float(lat.value) if lat else 0.0,
+        "office_longitude": float(lng.value) if lng else 0.0,
+        "geofence_radius_meters": float(radius.value) if radius else 500.0,
+        "policy_version": "v2.0-Enterprise"
+    }
+
+@router.post("/rules")
+def update_attendance_rules(
+    request: Request,
+    payload: Dict[str, Any],
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_admin)
+):
+    company_id = current_user.company_id
+    
+    for key, value in payload.items():
+        if key in ["face_match_threshold", "office_latitude", "office_longitude", "geofence_radius_meters"]:
+            crud.set_setting(db, key=key, value=str(value), company_id=company_id)
+            
+    crud.create_audit_log(
+        db=db,
+        user_id=current_user.id,
+        action="Configure Attendance Rules",
+        ip_address=request.client.host if request.client else None,
+        user_agent=request.headers.get("user-agent"),
+        details=f"Configured policy rules: {list(payload.keys())}",
+        company_id=company_id
+    )
+    return {"message": "Attendance rules updated successfully"}

backend/app/api/v1/tickets.py

@@ -1,6 +1,6 @@
 from fastapi import APIRouter, Depends, HTTPException, status, Request
 from sqlalchemy.orm import Session
-from typing import List
+from typing import List, Optional
 
 from app.core.database import get_db
 from app.core import security
@@ -12,19 +12,40 @@ router = APIRouter()
 
 @router.get("/", response_model=List[schemas.TicketOut])
 def read_tickets(
+    company_id: Optional[int] = None,
     db: Session = Depends(get_db),
     current_user: models.User = Depends(security.get_current_user)
 ):
     role_name = current_user.role.name if current_user.role else "Employee"
+    target_company_id = current_user.company_id if current_user.company_id is not None else company_id
     
-    if role_name in ["Super Admin", "Admin", "HR"]:
-        # Admins/HR can see all tickets for their company
-        return crud.get_tickets(db, company_id=current_user.company_id)
+    def is_admin_ticket(t):
+        # Look up the sender of the first message in this ticket
+        first_msg = db.query(models.TicketMessage).filter(models.TicketMessage.ticket_id == t.id).order_by(models.TicketMessage.timestamp.asc()).first()
+        if first_msg:
+            sender_user = db.query(models.User).filter(models.User.id == first_msg.sender_id).first()
+            if sender_user and sender_user.role:
+                return sender_user.role.name in ["Super Admin", "Admin", "HR"]
+        # Fallback to checking the ticket owner employee user role
+        if t.employee and t.employee.user and t.employee.user.role:
+            return t.employee.user.role.name in ["Super Admin", "Admin", "HR"]
+        return False
+
+    if role_name == "Super Admin":
+        # Super Admin resolves admin/HR problems. Show admin tickets across all companies.
+        all_tickets = crud.get_tickets(db, company_id=target_company_id)
+        return [t for t in all_tickets if is_admin_ticket(t)]
+        
+    elif role_name in ["Admin", "HR"]:
+        # Company Admin/HR resolves employee grievances/problems. Show employee tickets only.
+        company_tickets = crud.get_tickets(db, company_id=target_company_id)
+        return [t for t in company_tickets if not is_admin_ticket(t)]
+        
     else:
         # Employees can only see their own tickets
         if not current_user.employee:
             raise HTTPException(status_code=400, detail="User is not registered as an employee")
-        return crud.get_tickets(db, company_id=current_user.company_id, employee_id=current_user.employee.id)
+        return crud.get_tickets(db, company_id=target_company_id, employee_id=current_user.employee.id)
 
 @router.post("/", response_model=schemas.TicketOut, status_code=status.HTTP_201_CREATED)
 def create_ticket(
@@ -33,15 +54,17 @@ def create_ticket(
     db: Session = Depends(get_db),
     current_user: models.User = Depends(security.get_current_user)
 ):
-    role_name = current_user.role.name if current_user.role else "Employee"
-    if role_name != "Employee":
-        raise HTTPException(status_code=403, detail="Only employees can open support tickets")
-        
-    if not current_user.employee:
-        raise HTTPException(status_code=400, detail="User is not registered as an employee")
+    employee_id = current_user.employee.id if current_user.employee else None
+    if not employee_id:
+        # Check if user has an associated employee profile or grab first employee profile if admin
+        first_emp = db.query(models.Employee).filter(models.Employee.company_id == current_user.company_id).first()
+        if first_emp:
+            employee_id = first_emp.id
+        else:
+            raise HTTPException(status_code=400, detail="No registered employee profile found for opening ticket")
         
     db_ticket = crud.create_ticket(
-        db, ticket=ticket, employee_id=current_user.employee.id, company_id=current_user.company_id
+        db, ticket=ticket, employee_id=employee_id, company_id=current_user.company_id
     )
     
     crud.create_audit_log(
@@ -55,6 +78,10 @@ def create_ticket(
     )
     return db_ticket
 
+from fastapi.responses import StreamingResponse
+import json
+import asyncio
+
 @router.post("/{id}/messages", response_model=schemas.TicketMessageOut, status_code=status.HTTP_201_CREATED)
 def reply_to_ticket(
     id: int,
@@ -76,8 +103,64 @@ def reply_to_ticket(
             raise HTTPException(status_code=403, detail="Not authorized to post to this ticket")
             
     db_message = crud.create_ticket_message(db, ticket_id=id, msg=message, sender_id=current_user.id)
+    
+    # Broadcast reply to SSE stream
+    from app.core import event_bus
+    event_payload = {
+        "id": db_message.id,
+        "ticket_id": db_message.ticket_id,
+        "sender_id": db_message.sender_id,
+        "message": db_message.message,
+        "timestamp": db_message.timestamp.isoformat()
+    }
+    event_bus.publish_ticket_message(event_payload)
+    
     return db_message
 
+@router.get("/{id}/stream")
+async def ticket_stream(
+    id: int,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(security.get_current_user_sse)
+):
+    db_ticket = crud.get_ticket_by_id(db, ticket_id=id)
+    if not db_ticket:
+        raise HTTPException(status_code=404, detail="Ticket not found")
+        
+    # Check company ownership scope
+    if current_user.company_id is not None and db_ticket.company_id != current_user.company_id:
+        raise HTTPException(status_code=403, detail="Not authorized to access this resource")
+        
+    role_name = current_user.role.name if current_user.role else "Employee"
+    if role_name == "Employee":
+        if not current_user.employee or db_ticket.employee_id != current_user.employee.id:
+            raise HTTPException(status_code=403, detail="Not authorized to access this ticket stream")
+
+    async def event_generator():
+        from app.core import event_bus
+        queue = event_bus.subscribe_tickets()
+        try:
+            while True:
+                # Wait for next event published to the bus
+                event_data = await queue.get()
+                if event_data.get("ticket_id") == id:
+                    yield f"data: {json.dumps(event_data)}\n\n"
+        except asyncio.CancelledError:
+            # Client disconnected
+            pass
+        finally:
+            event_bus.unsubscribe_tickets(queue)
+
+    return StreamingResponse(
+        event_generator(),
+        media_type="text/event-stream",
+        headers={
+            "Cache-Control": "no-cache",
+            "Connection": "keep-alive",
+            "X-Accel-Buffering": "no"
+        }
+    )
+
 @router.put("/{id}/status", response_model=schemas.TicketOut)
 def update_ticket(
     request: Request,

backend/app/api/v1/timeline.py

@@ -0,0 +1,33 @@
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.orm import Session
+from typing import List, Optional
+
+from app.core.database import get_db
+from app.core import security
+from app.crud import crud
+from app.schemas import schemas
+from app.models import models
+
+router = APIRouter()
+checker_staff = security.RoleChecker(["Super Admin", "Admin", "HR"])
+
+@router.get("/", response_model=List[schemas.ActivityTimelineOut])
+def read_activity_timeline(
+    entity_type: Optional[str] = None,
+    entity_id: Optional[int] = None,
+    limit: int = 50,
+    db: Session = Depends(get_db),
+    current_user: models.User = Depends(checker_staff)
+):
+    company_id = current_user.company_id
+    if current_user.role.name == "Super Admin":
+        # Super Admins can see global platform timeline across all companies
+        return crud.get_activity_timeline(db, entity_type=entity_type, entity_id=entity_id, limit=limit)
+        
+    return crud.get_activity_timeline(
+        db, 
+        company_id=company_id, 
+        entity_type=entity_type, 
+        entity_id=entity_id, 
+        limit=limit
+    )

backend/app/core/attendance_policy.py

@@ -0,0 +1,127 @@
+import datetime
+from sqlalchemy.orm import Session
+from app.crud import crud
+from app.models import models
+import math
+
+class AttendancePolicyEngine:
+    @staticmethod
+    def calculate_distance(lat1: float, lon1: float, lat2: float, lon2: float) -> float:
+        # Haversine formula to compute distance in meters
+        R = 6371000  # Earth radius in meters
+        phi1 = math.radians(lat1)
+        phi2 = math.radians(lat2)
+        delta_phi = math.radians(lat2 - lat1)
+        delta_lambda = math.radians(lon2 - lon1)
+        
+        a = math.sin(delta_phi / 2) ** 2 + \
+            math.cos(phi1) * math.cos(phi2) * \
+            math.sin(delta_lambda / 2) ** 2
+        c = 2 * math.atan2(math.sqrt(a), math.sqrt(1 - a))
+        return R * c
+
+    @classmethod
+    def evaluate_attendance(
+        cls, 
+        db: Session, 
+        employee: models.Employee, 
+        lat: float = None, 
+        lng: float = None,
+        confidence: float = None
+    ) -> dict:
+        company_id = employee.company_id
+        now = datetime.datetime.now()
+        today = now.date()
+
+        # 1. Fetch matching settings
+        threshold_setting = crud.get_setting(db, "face_match_threshold", company_id)
+        match_threshold = float(threshold_setting.value) if threshold_setting else 0.6
+        
+        geofence_lat_setting = crud.get_setting(db, "office_latitude", company_id)
+        geofence_lng_setting = crud.get_setting(db, "office_longitude", company_id)
+        geofence_radius_setting = crud.get_setting(db, "geofence_radius_meters", company_id)
+
+        # 2. Confidence Validation
+        if confidence is not None and confidence < match_threshold:
+            return {"allowed": False, "reason": "Biometric match confidence score below threshold requirement."}
+
+        # 3. Geofence Validation
+        geofence_result = "Passed"
+        if geofence_lat_setting and geofence_lng_setting and geofence_radius_setting:
+            try:
+                target_lat = float(geofence_lat_setting.value)
+                target_lng = float(geofence_lng_setting.value)
+                allowed_radius = float(geofence_radius_setting.value)
+                
+                if lat is not None and lng is not None:
+                    distance = cls.calculate_distance(lat, lng, target_lat, target_lng)
+                    if distance > allowed_radius:
+                        if not employee.allow_wfh:
+                            return {"allowed": False, "reason": f"Outside authorized geofenced perimeter. Distance: {int(distance)}m."}
+                        geofence_result = f"WFH Approved ({int(distance)}m)"
+                else:
+                    if not employee.allow_wfh:
+                        return {"allowed": False, "reason": "GPS coordinates not supplied by kiosk terminal."}
+                    geofence_result = "WFH Approved (No GPS)"
+            except ValueError:
+                pass
+
+        # 4. Duplicate Check (within 5 minutes)
+        recent_log = crud.get_attendance_by_employee_and_date(db, employee_id=employee.id, attendance_date=today)
+        if recent_log and recent_log.check_in:
+            time_since_checkin = (now - recent_log.check_in).total_seconds()
+            if time_since_checkin < 300: # 5 minutes
+                return {"allowed": False, "reason": "Duplicate swipe attempt blocked. Please wait 5 minutes."}
+
+        # 5. Shift & Grace Period Rule Evaluation
+        late_minutes = 0
+        early_exit_minutes = 0
+        overtime_hours = 0.0
+        status = "Present"
+        
+        shift = employee.shift
+        shift_info = "Default Shift"
+        if shift:
+            shift_info = f"{shift.name} ({shift.start_time.strftime('%H:%M')} - {shift.end_time.strftime('%H:%M')})"
+            # Combine today's date with shift times
+            shift_start = datetime.datetime.combine(today, shift.start_time)
+            shift_end = datetime.datetime.combine(today, shift.end_time)
+            
+            # Check-in evaluation (Late arrival check)
+            if not recent_log: # First check-in of the day
+                grace_limit = shift_start + datetime.timedelta(minutes=shift.grace_period_minutes)
+                if now > grace_limit:
+                    status = "Late"
+                    late_minutes = int((now - shift_start).total_seconds() / 60)
+            else: # Checkout check
+                # Check early departure
+                if now < shift_end:
+                    early_exit_minutes = int((shift_end - now).total_seconds() / 60)
+                # Check overtime
+                if now > shift_end:
+                    overtime_hours = round((now - shift_end).total_seconds() / 3600, 2)
+
+        # 6. Calculate Streak Info
+        streak = 0
+        if recent_log and recent_log.attendance_streak:
+            streak = recent_log.attendance_streak
+        else:
+            # Look at yesterday's record
+            yesterday = today - datetime.timedelta(days=1)
+            yesterday_record = crud.get_attendance_by_employee_and_date(db, employee_id=employee.id, attendance_date=yesterday)
+            if yesterday_record and yesterday_record.status in ["Present", "Late"]:
+                streak = yesterday_record.attendance_streak + 1
+            else:
+                streak = 1
+
+        return {
+            "allowed": True,
+            "status": status if not employee.allow_wfh else "WFH",
+            "late_minutes": late_minutes,
+            "early_exit_minutes": early_exit_minutes,
+            "overtime_hours": overtime_hours,
+            "streak": streak,
+            "shift_info": shift_info,
+            "geofence_result": geofence_result,
+            "policy_version": "v2.0-Enterprise"
+        }

backend/app/core/config.py

@@ -53,7 +53,7 @@ class Settings(BaseSettings):
     REFRESH_TOKEN_EXPIRE_DAYS: int = 7
     
     # Seeding
-    INITIAL_ADMIN_EMAIL: str = "admin@netraid.ai"
+    INITIAL_ADMIN_EMAIL: str = "pavanupadhyay027@gmail.com"
     INITIAL_ADMIN_PASSWORD: str = "Admin@NetraID2026"
     
     # Face recognition & liveness detection parameters

backend/app/core/event_bus.py

@@ -53,3 +53,40 @@ def _publish_to_all(payload: dict) -> None:
             dead.append(q)
     for q in dead:
         unsubscribe(q)
+
+
+# --- Ticket Chat Broadcast Bus ---
+_ticket_subscribers: List[asyncio.Queue] = []
+
+def subscribe_tickets() -> asyncio.Queue:
+    global _loop
+    try:
+        _loop = asyncio.get_running_loop()
+    except RuntimeError:
+        pass
+    q: asyncio.Queue = asyncio.Queue(maxsize=50)
+    _ticket_subscribers.append(q)
+    return q
+
+def unsubscribe_tickets(q: asyncio.Queue) -> None:
+    try:
+        _ticket_subscribers.remove(q)
+    except ValueError:
+        pass
+
+def publish_ticket_message(payload: dict) -> None:
+    global _loop
+    if _loop is not None:
+        _loop.call_soon_threadsafe(_publish_ticket_to_all, payload)
+    else:
+        _publish_ticket_to_all(payload)
+
+def _publish_ticket_to_all(payload: dict) -> None:
+    dead: List[asyncio.Queue] = []
+    for q in _ticket_subscribers:
+        try:
+            q.put_nowait(payload)
+        except asyncio.QueueFull:
+            dead.append(q)
+    for q in dead:
+        unsubscribe_tickets(q)

backend/app/core/init_db.py

@@ -226,5 +226,46 @@ def init_db(db: Session):
         admin_user.hashed_password = crud.get_password_hash(settings.INITIAL_ADMIN_PASSWORD)
         admin_user.company_id = None
         db.commit()
+
+    # 4. Seed Default Company Admin User linked to NetraID Base
+    default_admin_email = "hr@netraid.ai"
+    default_admin = crud.get_user_by_email(db, default_admin_email)
+    if not default_admin:
+        logger.info(f"Seeding default company admin user: {default_admin_email}")
+        admin_create = schemas.UserCreate(
+            email=default_admin_email,
+            password="Admin@NetraID2026",
+            role_id=db_roles["Admin"].id
+        )
+        crud.create_user(db, admin_create, company_id=default_company.id)
+
+    # 5. Seed Default Employee User linked to NetraID Base
+    default_emp_email = "employee@netraid.ai"
+    default_emp = crud.get_user_by_email(db, default_emp_email)
+    if not default_emp:
+        logger.info(f"Seeding default employee user: {default_emp_email}")
+        emp_create = schemas.UserCreate(
+            email=default_emp_email,
+            password="Employee@NetraID2026",
+            role_id=db_roles["Employee"].id
+        )
+        db_user = crud.create_user(db, emp_create, company_id=default_company.id)
+        
+        eng_dept = db.execute(select(models.Department).where(
+            models.Department.code == "ENG",
+            models.Department.company_id == default_company.id
+        )).scalar_one_or_none()
+        dept_id = eng_dept.id if eng_dept else None
+
+        employee_in = schemas.EmployeeCreate(
+            name="Rahul Kumar",
+            employee_id="EMP101",
+            phone="9876543210",
+            email=default_emp_email,
+            designation="Software Engineer",
+            department_id=dept_id,
+            status="Active"
+        )
+        crud.create_employee(db, employee_in, user_id=db_user.id, company_id=default_company.id)
         
     logger.info("Database initialization and seeding completed successfully.")

backend/app/core/rate_limiter.py

@@ -0,0 +1,45 @@
+import time
+from typing import Dict, Tuple
+from fastapi import Request, HTTPException, status
+
+class SimpleRateLimiter:
+    """
+    Sliding window rate limiter to protect authentication, biometric, and sensitive API routes
+    against brute-force and credential stuffing attacks.
+    """
+    def __init__(self, requests_per_window: int = 10, window_seconds: int = 60):
+        self.requests_per_window = requests_per_window
+        self.window_seconds = window_seconds
+        # Mapping: IP address -> List of timestamps
+        self._history: Dict[str, list] = {}
+
+    def is_rate_limited(self, ip: str) -> bool:
+        now = time.time()
+        cutoff = now - self.window_seconds
+        
+        # Filter out timestamps outside current window
+        timestamps = [t for t in self._history.get(ip, []) if t > cutoff]
+        
+        if len(timestamps) >= self.requests_per_window:
+            self._history[ip] = timestamps
+            return True
+            
+        timestamps.append(now)
+        self._history[ip] = timestamps
+        return False
+
+# Global instance for Auth / Biometric Endpoints: Max 15 requests per 60 seconds per IP
+login_rate_limiter = SimpleRateLimiter(requests_per_window=15, window_seconds=60)
+
+def check_login_rate_limit(request: Request):
+    client_ip = request.client.host if request.client else "127.0.0.1"
+    # Support proxy headers if behind nginx/cloudflare
+    forwarded_for = request.headers.get("X-Forwarded-For")
+    if forwarded_for:
+        client_ip = forwarded_for.split(",")[0].strip()
+
+    if login_rate_limiter.is_rate_limited(client_ip):
+        raise HTTPException(
+            status_code=status.HTTP_429_TOO_MANY_REQUESTS,
+            detail="Too many authentication attempts. Please wait 60 seconds before trying again."
+        )

backend/app/core/security.py

@@ -10,6 +10,19 @@ from app.core.database import get_db
 from app.models import models
 from app.crud import crud
 
+import bcrypt
+
+def verify_password(plain_password: str, hashed_password: str) -> bool:
+    try:
+        # Convert password strings to bytes for bcrypt
+        return bcrypt.checkpw(plain_password.encode("utf-8"), hashed_password.encode("utf-8"))
+    except Exception:
+        return False
+
+def get_password_hash(password: str) -> str:
+    # Hash password using bcrypt salt
+    return bcrypt.hashpw(password.encode("utf-8"), bcrypt.gensalt()).decode("utf-8")
+
 oauth2_scheme = OAuth2PasswordBearer(
     tokenUrl=f"{settings.API_V1_STR}/auth/login"
 )

backend/app/crud/crud.py

@@ -1,6 +1,7 @@
 from sqlalchemy import select, or_, and_, func, delete
 from sqlalchemy.orm import Session
-from datetime import date, datetime, timedelta
+from datetime import date, datetime, timedelta, time
+from typing import Optional, List
 from app.models import models
 from app.schemas import schemas
 import logging
@@ -27,19 +28,62 @@ def get_companies(db: Session, skip: int = 0, limit: int = 100):
     return db.execute(select(models.Company).offset(skip).limit(limit)).scalars().all()
 
 def create_company(db: Session, company: schemas.CompanyCreate):
-    db_company = models.Company(**company.model_dump())
+    dump = company.model_dump()
+    logo = dump.pop("logo", None)
+    latitude = dump.pop("latitude", None)
+    longitude = dump.pop("longitude", None)
+    db_company = models.Company(**dump)
     db.add(db_company)
     db.commit()
     db.refresh(db_company)
+    if logo:
+        set_setting(db, key="COMPANY_LOGO", value=logo, company_id=db_company.id)
+    if latitude:
+        set_setting(db, key="LOCATION_LATITUDE", value=str(latitude), company_id=db_company.id)
+    if longitude:
+        set_setting(db, key="LOCATION_LONGITUDE", value=str(longitude), company_id=db_company.id)
+    if db_company.address:
+        set_setting(db, key="LOCATION_ADDRESS", value=db_company.address, company_id=db_company.id)
+
+    # Auto-seed standard departments for the new organization
+    default_depts = [
+        {"name": "Engineering", "code": "ENG", "description": "Software development, DevOps, QA, and IT systems"},
+        {"name": "Human Resources", "code": "HR", "description": "Recruitment, payroll, and staff relations"},
+        {"name": "Marketing & Sales", "code": "MKT", "description": "Product branding, marketing campaigns, and client sales"},
+        {"name": "Finance & Accounts", "code": "FIN", "description": "Financial planning, accounting, and budgeting"},
+        {"name": "Operations", "code": "OPS", "description": "Office administration and business facilities"}
+    ]
+    for d in default_depts:
+        db_dept = models.Department(
+            name=d["name"],
+            code=d["code"],
+            description=d["description"],
+            company_id=db_company.id
+        )
+        db.add(db_dept)
+    db.commit()
+    db.refresh(db_company)
     return db_company
 
 def update_company(db: Session, company_id: int, company: schemas.CompanyUpdate):
     db_company = get_company_by_id(db, company_id)
     if not db_company:
         return None
-    for key, value in company.model_dump(exclude_unset=True).items():
+    dump = company.model_dump(exclude_unset=True)
+    logo = dump.pop("logo", None)
+    latitude = dump.pop("latitude", None)
+    longitude = dump.pop("longitude", None)
+    for key, value in dump.items():
         setattr(db_company, key, value)
     db.commit()
+    if logo is not None:
+        set_setting(db, key="COMPANY_LOGO", value=logo, company_id=company_id)
+    if latitude is not None:
+        set_setting(db, key="LOCATION_LATITUDE", value=str(latitude), company_id=company_id)
+    if longitude is not None:
+        set_setting(db, key="LOCATION_LONGITUDE", value=str(longitude), company_id=company_id)
+    if db_company.address:
+        set_setting(db, key="LOCATION_ADDRESS", value=db_company.address, company_id=company_id)
     db.refresh(db_company)
     return db_company
 
@@ -285,6 +329,58 @@ def get_attendance_logs(db: Session, company_id: int = None, skip: int = 0, limi
     query = query.order_by(models.AttendanceLog.timestamp.desc()).offset(skip).limit(limit)
     return db.execute(query).scalars().all()
 
+def create_attendance_log(
+    db: Session,
+    employee_id: Optional[int],
+    camera: str,
+    confidence: Optional[float],
+    liveness_score: Optional[float],
+    is_spoof: bool,
+    status: str,
+    timestamp: datetime = None,
+    image_path: str = None,
+    location_text: str = None,
+    latitude: float = None,
+    longitude: float = None,
+    face_quality: float = None,
+    blur_score: float = None,
+    brightness_score: float = None,
+    is_occluded: bool = False,
+    has_mask: bool = False,
+    recognition_time_ms: float = None,
+    processing_time_ms: float = None,
+    embedding_version: str = None,
+    device_id: int = None
+):
+    if timestamp is None:
+        timestamp = datetime.utcnow()
+    db_log = models.AttendanceLog(
+        employee_id=employee_id,
+        timestamp=timestamp,
+        camera=camera,
+        confidence=confidence,
+        liveness_score=liveness_score,
+        is_spoof=is_spoof,
+        status=status,
+        image_path=image_path,
+        location_text=location_text,
+        latitude=latitude,
+        longitude=longitude,
+        face_quality=face_quality,
+        blur_score=blur_score,
+        brightness_score=brightness_score,
+        is_occluded=is_occluded,
+        has_mask=has_mask,
+        recognition_time_ms=recognition_time_ms,
+        processing_time_ms=processing_time_ms,
+        embedding_version=embedding_version,
+        device_id=device_id
+    )
+    db.add(db_log)
+    db.commit()
+    db.refresh(db_log)
+    return db_log
+
 def get_daily_attendance(db: Session, date_val: date, employee_id: int = None, department_id: int = None, company_id: int = None):
     query = select(models.Attendance).join(models.Employee)
     filters = [models.Attendance.date == date_val]
@@ -318,7 +414,9 @@ def delete_face_embeddings(db: Session, employee_id: int):
     db.commit()
 
 def mark_kiosk_attendance(db: Session, employee_id: int, timestamp: datetime, camera: str, confidence: float) -> models.Attendance:
-    today = timestamp.date()
+    # Convert UTC timestamp to IST to get today's date and for shift/deadline comparisons
+    ist_time = timestamp + timedelta(hours=5, minutes=30)
+    today = ist_time.date()
 
     employee = db.get(models.Employee, employee_id)
     if not employee:
@@ -363,7 +461,7 @@ def mark_kiosk_attendance(db: Session, employee_id: int, timestamp: datetime, ca
 
     if not db_attendance:
         # First scan of the day -> CHECK-IN
-        is_late = timestamp > check_in_deadline
+        is_late = ist_time > check_in_deadline
         status = "Late" if is_late else "Present"
 
         db_attendance = models.Attendance(
@@ -393,7 +491,7 @@ def mark_kiosk_attendance(db: Session, employee_id: int, timestamp: datetime, ca
             # Auto-calculate early departure
             if employee.shift:
                 shift_end_dt = datetime.combine(today, employee.shift.end_time)
-                db_attendance.early_departure = timestamp < shift_end_dt
+                db_attendance.early_departure = ist_time < shift_end_dt
             
             logger.info(f"Marked Check-Out for employee {employee_id} at {timestamp}. Hours: {db_attendance.working_hours}")
 
@@ -557,3 +655,160 @@ def update_ticket_status(db: Session, ticket_id: int, status: str):
     db.commit()
     db.refresh(db_ticket)
     return db_ticket
+
+# --- Device CRUD ---
+def get_device_by_id(db: Session, device_id: int):
+    return db.get(models.Device, device_id)
+
+def get_devices(db: Session, company_id: int = None):
+    query = select(models.Device)
+    if company_id is not None:
+        query = query.where(models.Device.company_id == company_id)
+    return db.execute(query.order_by(models.Device.name.asc())).scalars().all()
+
+def create_device(db: Session, device: schemas.DeviceCreate, company_id: int):
+    db_device = models.Device(
+        name=device.name,
+        device_type=device.device_type,
+        company_id=company_id,
+        branch=device.branch,
+        camera=device.camera,
+        ip_address=device.ip_address,
+        os_info=device.os_info,
+        app_version=device.app_version
+    )
+    db.add(db_device)
+    db.commit()
+    db.refresh(db_device)
+    return db_device
+
+def update_device(db: Session, device_id: int, device_update: schemas.DeviceUpdate):
+    db_device = get_device_by_id(db, device_id)
+    if not db_device:
+        return None
+    update_data = device_update.model_dump(exclude_unset=True)
+    for key, value in update_data.items():
+        setattr(db_device, key, value)
+    db_device.heartbeat = datetime.utcnow()
+    db.commit()
+    db.refresh(db_device)
+    return db_device
+
+# --- Notification CRUD ---
+def get_notification_by_id(db: Session, notification_id: int):
+    return db.get(models.Notification, notification_id)
+
+def get_notifications(db: Session, company_id: int = None, recipient_id: int = None, is_read: bool = None):
+    query = select(models.Notification)
+    filters = []
+    if company_id is not None:
+        filters.append(models.Notification.company_id == company_id)
+    if recipient_id is not None:
+        # Show both specific recipient notifications and broadcast notifications (where recipient_id is Null)
+        filters.append(or_(models.Notification.recipient_id == recipient_id, models.Notification.recipient_id.is_(None)))
+    if is_read is not None:
+        filters.append(models.Notification.is_read == is_read)
+    filters.append(models.Notification.is_archived == False)
+    
+    if filters:
+        query = query.where(and_(*filters))
+    return db.execute(query.order_by(models.Notification.created_at.desc())).scalars().all()
+
+def create_notification(db: Session, ntf: schemas.NotificationCreate, company_id: int, sender_id: int = None):
+    db_ntf = models.Notification(
+        company_id=company_id,
+        recipient_id=ntf.recipient_id,
+        sender_id=sender_id,
+        title=ntf.title,
+        message=ntf.message,
+        category=ntf.category,
+        priority=ntf.priority,
+        expires_at=ntf.expires_at
+    )
+    db.add(db_ntf)
+    db.commit()
+    db.refresh(db_ntf)
+    return db_ntf
+
+def mark_notification_read(db: Session, notification_id: int):
+    db_ntf = get_notification_by_id(db, notification_id)
+    if db_ntf:
+        db_ntf.is_read = True
+        db.commit()
+        db.refresh(db_ntf)
+    return db_ntf
+
+def archive_notification(db: Session, notification_id: int):
+    db_ntf = get_notification_by_id(db, notification_id)
+    if db_ntf:
+        db_ntf.is_archived = True
+        db.commit()
+        db.refresh(db_ntf)
+    return db_ntf
+
+# --- Activity Timeline CRUD ---
+def create_activity_timeline_log(
+    db: Session, 
+    company_id: int, 
+    actor_id: int, 
+    action: str, 
+    entity_type: str, 
+    entity_id: int = None, 
+    previous_value: str = None, 
+    new_value: str = None, 
+    ip_address: str = None, 
+    device_info: str = None, 
+    browser_info: str = None
+):
+    log = models.ActivityTimeline(
+        company_id=company_id,
+        actor_id=actor_id,
+        action=action,
+        entity_type=entity_type,
+        entity_id=entity_id,
+        previous_value=previous_value,
+        new_value=new_value,
+        ip_address=ip_address,
+        device_info=device_info,
+        browser_info=browser_info
+    )
+    db.add(log)
+    db.commit()
+    db.refresh(log)
+    return log
+
+def get_activity_timeline(db: Session, company_id: int = None, entity_type: str = None, entity_id: int = None, limit: int = 50):
+    query = select(models.ActivityTimeline)
+    filters = []
+    if company_id is not None:
+        filters.append(models.ActivityTimeline.company_id == company_id)
+    if entity_type is not None:
+        filters.append(models.ActivityTimeline.entity_type == entity_type)
+    if entity_id is not None:
+        filters.append(models.ActivityTimeline.entity_id == entity_id)
+    if filters:
+        query = query.where(and_(*filters))
+    return db.execute(query.order_by(models.ActivityTimeline.timestamp.desc()).limit(limit)).scalars().all()
+
+def save_employee_image(db: Session, employee_id: int, file_path: str, pose_type: str, image_bytes: bytes = None):
+    db_img = models.EmployeeImage(
+        employee_id=employee_id,
+        file_path=file_path,
+        pose_type=pose_type,
+        image_bytes=image_bytes
+    )
+    db.add(db_img)
+    db.commit()
+    db.refresh(db_img)
+    return db_img
+
+def save_face_embedding(db: Session, employee_id: int, image_id: int, embedding: list):
+    db_emb = models.FaceEmbedding(
+        employee_id=employee_id,
+        image_id=image_id,
+        embedding=embedding
+    )
+    db.add(db_emb)
+    db.commit()
+    db.refresh(db_emb)
+    return db_emb

backend/app/main.py

@@ -2,8 +2,14 @@ import os
 import threading
 import time
 
+import sys
+
 # Enforce IST Timezone for all attendance date calculations (important for HuggingFace / UTC cloud servers)
-os.environ["TZ"] = "Asia/Kolkata"
+if sys.platform == "win32":
+    os.environ["TZ"] = "IST-5:30"
+else:
+    os.environ["TZ"] = "Asia/Kolkata"
+
 if hasattr(time, "tzset"):
     time.tzset()
 from datetime import datetime, timedelta
@@ -16,7 +22,8 @@ from sqlalchemy import delete
 from app.core.config import settings
 from app.core.database import SessionLocal
 from app.core.init_db import init_db
-from app.api.v1 import auth, employees, departments, enrollment, kiosk, attendance, reports, analytics, settings as settings_api, audit, companies, tickets
+from app.models import models
+from app.api.v1 import auth, employees, departments, enrollment, kiosk, attendance, reports, analytics, settings as settings_api, audit, companies, tickets, devices, notifications, timeline, policy
 
 # Logging configuration
 logging.basicConfig(level=logging.INFO, format="%(asctime)s - %(name)s - %(levelname)s - %(message)s")
@@ -31,29 +38,53 @@ app = FastAPI(
     redoc_url="/redoc"
 )
 
+from fastapi import Request
+
+@app.middleware("http")
+async def add_security_headers(request: Request, call_next):
+    response = await call_next(request)
+    response.headers["X-Frame-Options"] = "DENY"
+    response.headers["X-Content-Type-Options"] = "nosniff"
+    response.headers["X-XSS-Protection"] = "1; mode=block"
+    response.headers["Referrer-Policy"] = "strict-origin-when-cross-origin"
+    response.headers["Content-Security-Policy"] = "default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; img-src 'self' data: blob: https:; connect-src 'self' ws: wss: https:;"
+    return response
+
 # Mount uploads directory as static files
 # Dynamic uploads endpoint: serves images from database (fallback to local disk)
 from app.core.database import get_db
 
 @app.get("/uploads/{employee_id}/{filename}")
 def get_upload_file(employee_id: str, filename: str, db: Session = Depends(get_db)):
+    # Sanitize inputs to prevent directory traversal
+    clean_emp_id = os.path.basename(employee_id.replace("..", "").replace("/", "").replace("\\", ""))
+    clean_filename = os.path.basename(filename.replace("..", "").replace("/", "").replace("\\", ""))
+    
+    if not clean_emp_id or not clean_filename:
+        raise HTTPException(status_code=400, detail="Invalid request parameters")
+        
     # Parse pose type from filename (e.g. "front.jpg" -> "front")
-    pose_type = filename.split(".")[0].lower()
+    pose_type = clean_filename.split(".")[0].lower()
     
     # Query database for this employee and pose_type
     db_img = db.query(models.EmployeeImage).join(models.Employee).filter(
-        models.Employee.employee_id == employee_id,
+        models.Employee.employee_id == clean_emp_id,
         models.EmployeeImage.pose_type.ilike(pose_type)
     ).first()
     
     if db_img and db_img.image_bytes:
         return Response(content=db_img.image_bytes, media_type="image/jpeg")
         
-    # Fallback to local file system if not in DB (e.g. legacy/development)
-    local_path = os.path.join(settings.UPLOAD_DIR, employee_id, filename)
-    if os.path.exists(local_path):
+    # Fallback to local file system with strict path canonicalization
+    upload_dir_abs = os.path.abspath(settings.UPLOAD_DIR)
+    local_path_abs = os.path.abspath(os.path.join(upload_dir_abs, clean_emp_id, clean_filename))
+    
+    if not local_path_abs.startswith(upload_dir_abs):
+        raise HTTPException(status_code=403, detail="Access denied: Path traversal attempt detected")
+        
+    if os.path.exists(local_path_abs):
         try:
-            with open(local_path, "rb") as f:
+            with open(local_path_abs, "rb") as f:
                 return Response(content=f.read(), media_type="image/jpeg")
         except Exception:
             pass
@@ -194,5 +225,9 @@ app.include_router(settings_api.router, prefix=f"{settings.API_V1_STR}/settings"
 app.include_router(audit.router, prefix=f"{settings.API_V1_STR}/audit", tags=["System Audit Logs"])
 app.include_router(companies.router, prefix=f"{settings.API_V1_STR}/companies", tags=["Company Management"])
 app.include_router(tickets.router, prefix=f"{settings.API_V1_STR}/tickets", tags=["Support Tickets & Helpdesk"])
+app.include_router(devices.router, prefix=f"{settings.API_V1_STR}/devices", tags=["Kiosk Devices"])
+app.include_router(notifications.router, prefix=f"{settings.API_V1_STR}/notifications", tags=["In-App Notifications"])
+app.include_router(timeline.router, prefix=f"{settings.API_V1_STR}/timeline", tags=["Activity History Timeline"])
+app.include_router(policy.router, prefix=f"{settings.API_V1_STR}/policy", tags=["Attendance Rules Policy Engine"])
 # Trigger reload - reload 2
 

backend/app/models/models.py

@@ -59,6 +59,7 @@ class Company(Base):
     settings = relationship("Setting", back_populates="company", cascade="all, delete-orphan")
     audit_logs = relationship("AuditLog", back_populates="company", cascade="all, delete-orphan")
     tickets = relationship("Ticket", back_populates="company", cascade="all, delete-orphan")
+    devices = relationship("Device", back_populates="company", cascade="all, delete-orphan")
 
 class Role(Base):
     __tablename__ = "roles"
@@ -193,6 +194,16 @@ class Attendance(Base):
     status = Column(String(20), default="Absent")  # Present, Absent, Late, Half Day, Leave, Holiday, WFH
     emergency_allowed = Column(Boolean, default=False)
 
+    # Enterprise Extensions
+    late_minutes = Column(Integer, default=0)
+    early_exit_minutes = Column(Integer, default=0)
+    break_time_minutes = Column(Integer, default=0)
+    attendance_streak = Column(Integer, default=0)
+    attendance_percentage = Column(Float, default=100.0)
+    shift_info = Column(String(255), nullable=True)
+    geofence_result = Column(String(100), nullable=True)
+    policy_version = Column(String(50), nullable=True)
+
     employee = relationship("Employee", back_populates="attendance_records")
 
 class AttendanceLog(Base):
@@ -200,7 +211,7 @@ class AttendanceLog(Base):
 
     id = Column(Integer, primary_key=True, index=True)
     employee_id = Column(Integer, ForeignKey("employees.id", ondelete="CASCADE"), nullable=True)  # Null if not recognized
-    timestamp = Column(DateTime, default=datetime.datetime.now, nullable=False)
+    timestamp = Column(DateTime, default=datetime.datetime.utcnow, nullable=False)
     camera = Column(String(100), default="Kiosk")
     confidence = Column(Float, nullable=True)
     liveness_score = Column(Float, nullable=True)
@@ -211,6 +222,17 @@ class AttendanceLog(Base):
     latitude = Column(Float, nullable=True)
     longitude = Column(Float, nullable=True)
 
+    # Recognition Analytics Extensions
+    face_quality = Column(Float, nullable=True)
+    blur_score = Column(Float, nullable=True)
+    brightness_score = Column(Float, nullable=True)
+    is_occluded = Column(Boolean, default=False)
+    has_mask = Column(Boolean, default=False)
+    recognition_time_ms = Column(Float, nullable=True)
+    processing_time_ms = Column(Float, nullable=True)
+    embedding_version = Column(String(50), nullable=True)
+    device_id = Column(Integer, ForeignKey("devices.id", ondelete="SET NULL"), nullable=True)
+
     employee = relationship("Employee", back_populates="attendance_logs")
 
 class LeaveRequest(Base):
@@ -257,7 +279,7 @@ class AuditLog(Base):
     id = Column(Integer, primary_key=True, index=True)
     user_id = Column(Integer, ForeignKey("users.id", ondelete="SET NULL"), nullable=True)
     action = Column(String(100), nullable=False)  # Login, Logout, Create Employee, Mark Attendance, etc.
-    timestamp = Column(DateTime, default=datetime.datetime.now)
+    timestamp = Column(DateTime, default=datetime.datetime.utcnow)
     ip_address = Column(String(50), nullable=True)
     user_agent = Column(String(255), nullable=True)
     details = Column(Text, nullable=True)
@@ -293,3 +315,66 @@ class TicketMessage(Base):
 
     ticket = relationship("Ticket", back_populates="messages")
     sender = relationship("User")
+
+class Device(Base):
+    __tablename__ = "devices"
+
+    id = Column(Integer, primary_key=True, index=True)
+    name = Column(String(100), nullable=False)
+    device_type = Column(String(50), default="Kiosk")  # Kiosk, Mobile, Gateway
+    company_id = Column(Integer, ForeignKey("companies.id", ondelete="CASCADE"), nullable=True)
+    branch = Column(String(100), default="Main Headquarters")
+    camera = Column(String(100), default="Main Camera")
+    ip_address = Column(String(50), nullable=True)
+    os_info = Column(String(100), nullable=True)
+    app_version = Column(String(50), nullable=True)
+    status = Column(String(50), default="Online")  # Online, Offline, Maintenance
+    heartbeat = Column(DateTime, default=datetime.datetime.utcnow)
+    cpu_usage = Column(Float, default=0.0)
+    memory_usage = Column(Float, default=0.0)
+    disk_usage = Column(Float, default=0.0)
+    battery_level = Column(Integer, default=100)
+    network_status = Column(String(50), default="Good")
+    last_sync = Column(DateTime, default=datetime.datetime.utcnow)
+    restart_count = Column(Integer, default=0)
+
+    company = relationship("Company", back_populates="devices")
+
+class Notification(Base):
+    __tablename__ = "notifications"
+
+    id = Column(Integer, primary_key=True, index=True)
+    company_id = Column(Integer, ForeignKey("companies.id", ondelete="CASCADE"), nullable=True)
+    recipient_id = Column(Integer, ForeignKey("users.id", ondelete="CASCADE"), nullable=True)  # Null if broadcast
+    sender_id = Column(Integer, ForeignKey("users.id", ondelete="SET NULL"), nullable=True)
+    title = Column(String(255), nullable=False)
+    message = Column(Text, nullable=False)
+    category = Column(String(100), default="General")  # Attendance, HR, Leave, Alert, System
+    priority = Column(String(50), default="Medium")  # Low, Medium, High
+    is_read = Column(Boolean, default=False)
+    is_archived = Column(Boolean, default=False)
+    created_at = Column(DateTime, default=datetime.datetime.utcnow)
+    expires_at = Column(DateTime, nullable=True)
+
+    company = relationship("Company")
+    recipient = relationship("User", foreign_keys=[recipient_id])
+    sender = relationship("User", foreign_keys=[sender_id])
+
+class ActivityTimeline(Base):
+    __tablename__ = "activity_timelines"
+
+    id = Column(Integer, primary_key=True, index=True)
+    company_id = Column(Integer, ForeignKey("companies.id", ondelete="CASCADE"), nullable=True)
+    actor_id = Column(Integer, ForeignKey("users.id", ondelete="SET NULL"), nullable=True)
+    action = Column(String(100), nullable=False)  # Create, Update, Delete, Authenticate, Scan
+    entity_type = Column(String(100), nullable=False)  # Employee, Organization, Device, Attendance, Ticket
+    entity_id = Column(Integer, nullable=True)
+    previous_value = Column(Text, nullable=True)
+    new_value = Column(Text, nullable=True)
+    timestamp = Column(DateTime, default=datetime.datetime.utcnow)
+    ip_address = Column(String(50), nullable=True)
+    device_info = Column(String(255), nullable=True)
+    browser_info = Column(String(255), nullable=True)
+
+    company = relationship("Company")
+    actor = relationship("User")

backend/app/schemas/schemas.py

@@ -24,7 +24,10 @@ class CompanyBase(BaseModel):
     address: Optional[str] = None
 
 class CompanyCreate(CompanyBase):
-    pass
+    logo: Optional[str] = None
+    latitude: Optional[str] = None
+    longitude: Optional[str] = None
+    admin_password: Optional[str] = None
 
 class CompanyUpdate(BaseModel):
     name: Optional[str] = None
@@ -35,6 +38,9 @@ class CompanyUpdate(BaseModel):
     admin_email: Optional[EmailStr] = None
     phone: Optional[str] = None
     address: Optional[str] = None
+    logo: Optional[str] = None
+    latitude: Optional[str] = None
+    longitude: Optional[str] = None
 
 class CompanyOut(CompanyBase):
     id: int
@@ -54,6 +60,22 @@ class UserUpdate(BaseModel):
     role_id: Optional[int] = None
     is_active: Optional[bool] = None
 
+class AdminRegister(BaseModel):
+    company_name: str
+    email: EmailStr
+    password: str
+    phone: Optional[str] = None
+    address: Optional[str] = None
+
+class EmployeeRegister(BaseModel):
+    company_id: int
+    name: str
+    email: EmailStr
+    password: str
+    employee_id: str
+    phone: Optional[str] = None
+    designation: Optional[str] = None
+
 
 # Token Schemas
 class Token(BaseModel):
@@ -204,6 +226,14 @@ class AttendanceOut(AttendanceBase):
     early_departure: bool
     overtime: float
     emergency_allowed: bool = False
+    late_minutes: Optional[int] = 0
+    early_exit_minutes: Optional[int] = 0
+    break_time_minutes: Optional[int] = 0
+    attendance_streak: Optional[int] = 0
+    attendance_percentage: Optional[float] = 0.0
+    shift_info: Optional[str] = None
+    geofence_result: Optional[str] = None
+    policy_version: Optional[str] = None
     employee: Optional[EmployeeOut] = None
     model_config = ConfigDict(from_attributes=True)
 
@@ -227,6 +257,15 @@ class AttendanceLogOut(BaseModel):
     location_text: Optional[str] = None
     latitude: Optional[float] = None
     longitude: Optional[float] = None
+    face_quality: Optional[float] = None
+    blur_score: Optional[float] = None
+    brightness_score: Optional[float] = None
+    is_occluded: bool
+    has_mask: bool
+    recognition_time_ms: Optional[float] = None
+    processing_time_ms: Optional[float] = None
+    embedding_version: Optional[str] = None
+    device_id: Optional[int] = None
     employee: Optional[EmployeeOut] = None
     model_config = ConfigDict(from_attributes=True)
 
@@ -330,3 +369,76 @@ class TicketOut(TicketBase):
     employee: Optional[EmployeeOut] = None
     messages: List[TicketMessageOut] = []
     model_config = ConfigDict(from_attributes=True)
+
+# Device Schemas
+class DeviceBase(BaseModel):
+    name: str
+    device_type: str = "Kiosk"
+    branch: str = "Main Headquarters"
+    camera: str = "Main Camera"
+    ip_address: Optional[str] = None
+    os_info: Optional[str] = None
+    app_version: Optional[str] = None
+
+class DeviceCreate(DeviceBase):
+    pass
+
+class DeviceUpdate(BaseModel):
+    name: Optional[str] = None
+    status: Optional[str] = None
+    cpu_usage: Optional[float] = None
+    memory_usage: Optional[float] = None
+    disk_usage: Optional[float] = None
+    battery_level: Optional[int] = None
+    network_status: Optional[str] = None
+
+class DeviceOut(DeviceBase):
+    id: int
+    company_id: Optional[int] = None
+    status: str
+    heartbeat: datetime
+    cpu_usage: float
+    memory_usage: float
+    disk_usage: float
+    battery_level: int
+    network_status: str
+    last_sync: datetime
+    restart_count: int
+    model_config = ConfigDict(from_attributes=True)
+
+# Notification Schemas
+class NotificationBase(BaseModel):
+    title: str
+    message: str
+    category: str = "General"
+    priority: str = "Medium"
+    expires_at: Optional[datetime] = None
+
+class NotificationCreate(NotificationBase):
+    recipient_id: Optional[int] = None
+
+class NotificationOut(NotificationBase):
+    id: int
+    company_id: Optional[int] = None
+    recipient_id: Optional[int] = None
+    sender_id: Optional[int] = None
+    is_read: bool
+    is_archived: bool
+    created_at: datetime
+    model_config = ConfigDict(from_attributes=True)
+
+# ActivityTimeline Schemas
+class ActivityTimelineOut(BaseModel):
+    id: int
+    company_id: Optional[int] = None
+    actor_id: Optional[int] = None
+    action: str
+    entity_type: str
+    entity_id: Optional[int] = None
+    previous_value: Optional[str] = None
+    new_value: Optional[str] = None
+    timestamp: datetime
+    ip_address: Optional[str] = None
+    device_info: Optional[str] = None
+    browser_info: Optional[str] = None
+    model_config = ConfigDict(from_attributes=True)

backend/app/tests/test_production_features.py

@@ -79,9 +79,9 @@ def test_shift_attendance_rules():
         db.commit()
         db.refresh(employee)
         
-        # Test 1: Check-in before deadline (10:10)
-        # We manually call mark_kiosk_attendance with timestamps
-        checkin_time_on_time = datetime.combine(datetime.now().date(), time(10, 5))
+        # Test 1: Check-in before deadline (10:10 IST)
+        # We manually call mark_kiosk_attendance with UTC timestamps (10:05 IST = 04:35 UTC)
+        checkin_time_on_time = datetime.combine(datetime.now().date(), time(4, 35))
         att = crud.mark_kiosk_attendance(db, employee.id, checkin_time_on_time, "Test Cam", 0.95)
         
         assert att.late_arrival is False
@@ -91,8 +91,8 @@ def test_shift_attendance_rules():
         db.delete(att)
         db.commit()
         
-        # Test 2: Check-in after deadline (10:15)
-        checkin_time_late = datetime.combine(datetime.now().date(), time(10, 15))
+        # Test 2: Check-in after deadline (10:15 IST = 04:45 UTC)
+        checkin_time_late = datetime.combine(datetime.now().date(), time(4, 45))
         att_late = crud.mark_kiosk_attendance(db, employee.id, checkin_time_late, "Test Cam", 0.95)
         
         # In mark_kiosk_attendance, it uses local_now (current time) for determining is_late,

backend/delete_all_employees.py

@@ -0,0 +1,82 @@
+import os
+import shutil
+import sqlite3
+
+def clean_db(db_path):
+    if not os.path.exists(db_path):
+        print(f"Database {db_path} not found.")
+        return
+
+    print(f"Cleaning database: {db_path}")
+    conn = sqlite3.connect(db_path)
+    c = conn.cursor()
+
+    # Get employee user_ids first
+    try:
+        c.execute("SELECT user_id, employee_id, name FROM employees")
+        employees = c.fetchall()
+        employee_user_ids = [emp[0] for emp in employees if emp[0] is not None]
+        print(f"Found {len(employees)} employees in {db_path}.")
+    except sqlite3.OperationalError as e:
+        print(f"Could not read employees: {e}")
+        conn.close()
+        return
+
+    # Delete related records
+    tables = [
+        "face_embeddings",
+        "employee_images",
+        "attendance",
+        "attendance_logs",
+        "leave_requests",
+        "ticket_messages",
+        "tickets",
+        "employees"
+    ]
+    
+    for table in tables:
+        try:
+            c.execute(f"DELETE FROM {table}")
+            print(f"Deleted records from table: {table}")
+        except sqlite3.OperationalError as e:
+            print(f"Table {table} delete error: {e}")
+
+    # Associated Users
+    if employee_user_ids:
+        try:
+            placeholders = ','.join('?' for _ in employee_user_ids)
+            c.execute(f"DELETE FROM users WHERE id IN ({placeholders})", employee_user_ids)
+            print(f"Deleted {c.rowcount} associated employee user accounts from users table.")
+        except sqlite3.OperationalError as e:
+            print(f"Users table delete error: {e}")
+
+    conn.commit()
+    conn.close()
+    print(f"Finished cleaning database: {db_path}\n")
+
+def delete_employee_data():
+    # Clean both potential database paths
+    clean_db('netraid.db')
+    clean_db('../netraid.db')
+
+    # Delete image files from uploads
+    uploads_dir = './uploads'
+    if os.path.exists(uploads_dir):
+        deleted_dirs = 0
+        for item in os.listdir(uploads_dir):
+            item_path = os.path.join(uploads_dir, item)
+            if os.path.isdir(item_path):
+                try:
+                    shutil.rmtree(item_path)
+                    print(f"Deleted uploads directory: {item_path}")
+                    deleted_dirs += 1
+                except Exception as e:
+                    print(f"Error deleting directory {item_path}: {e}")
+        print(f"Cleared {deleted_dirs} employee upload folders from {uploads_dir}.")
+    else:
+        print("Uploads directory not found.")
+
+    print("\n[SUCCESS] All employee data has been successfully deleted!")
+
+if __name__ == '__main__':
+    delete_employee_data()

frontend/app/analytics/page.tsx

@@ -0,0 +1,852 @@
+"use client";
+
+import React, { useState, useEffect, useMemo } from "react";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
+import ReactECharts from "echarts-for-react";
+import * as echarts from "echarts";
+import SidebarLayout from "@/components/SidebarLayout";
+import { fetchApi, getUserProfile } from "@/app/utils/api";
+import { 
+  TrendingUp, Users, Activity, CheckCircle, BarChart3, PieChart,
+  Calendar, ShieldCheck, Zap, RefreshCw, Building2, Layers, Shield,
+  Filter, RotateCcw, Search
+} from "lucide-react";
+
+export default function AnalyticsPage() {
+  const queryClient = useQueryClient();
+  const [days, setDays] = useState<number>(7);
+  const [selectedOrgId, setSelectedOrgId] = useState<string>("ALL");
+  const [tierFilter, setTierFilter] = useState<string>("ALL");
+  const [statusFilter, setStatusFilter] = useState<string>("ALL");
+  const [deptFilter, setDeptFilter] = useState<string>("ALL");
+  
+  const [isRefreshing, setIsRefreshing] = useState(false);
+  const [profile, setProfile] = useState<any>(null);
+  const [profileLoading, setProfileLoading] = useState(true);
+
+  useEffect(() => {
+    setProfile(getUserProfile());
+    setProfileLoading(false);
+  }, []);
+
+  const isSuperAdmin = profile?.role?.name === "Super Admin";
+
+  // 1. Fetch Companies (For Super Admin Platform Analytics)
+  const { data: companies = [], refetch: refetchCompanies } = useQuery({
+    queryKey: ["analytics-companies"],
+    queryFn: () => fetchApi("/companies/"),
+    enabled: isSuperAdmin && !profileLoading,
+  });
+
+  // 2. Fetch Summary (For Org Admin / Common Analytics)
+  const { data: summary, refetch: refetchSummary } = useQuery({
+    queryKey: ["analytics-summary"],
+    queryFn: () => fetchApi("/analytics/dashboard-summary"),
+    enabled: !profileLoading,
+  });
+
+  // 3. Fetch Attendance Trends
+  const { data: trends = [], refetch: refetchTrends } = useQuery({
+    queryKey: ["analytics-trends", days],
+    queryFn: () => fetchApi(`/analytics/attendance-trends?days=${days}`),
+    enabled: !isSuperAdmin && !profileLoading,
+  });
+
+  // 4. Fetch Department Distribution
+  const { data: deptDist = [] } = useQuery({
+    queryKey: ["analytics-departments"],
+    queryFn: () => fetchApi("/analytics/department-distribution"),
+    enabled: !isSuperAdmin && !profileLoading,
+  });
+
+  // 5. Fetch Recognition Analytics
+  const { data: recognition } = useQuery({
+    queryKey: ["analytics-recognition"],
+    queryFn: () => fetchApi("/analytics/recognition"),
+    enabled: !profileLoading,
+  });
+
+  const handleRefreshAll = async () => {
+    setIsRefreshing(true);
+    try {
+      await queryClient.invalidateQueries({ queryKey: ["analytics-summary"] });
+      await queryClient.invalidateQueries({ queryKey: ["analytics-trends"] });
+      if (isSuperAdmin) {
+        await refetchCompanies();
+      } else {
+        await Promise.all([refetchSummary(), refetchTrends()]);
+      }
+    } catch (e) {
+      console.error(e);
+    } finally {
+      setTimeout(() => setIsRefreshing(false), 800);
+    }
+  };
+
+  const handleResetFilters = () => {
+    setDays(7);
+    setSelectedOrgId("ALL");
+    setTierFilter("ALL");
+    setStatusFilter("ALL");
+    setDeptFilter("ALL");
+  };
+
+  // Filtered Companies data based on top filters
+  const filteredCompanies = useMemo(() => {
+    return companies.filter((c: any) => {
+      if (selectedOrgId !== "ALL" && c.id.toString() !== selectedOrgId) return false;
+      if (tierFilter !== "ALL" && (c.subscription_tier || "Free") !== tierFilter) return false;
+      if (statusFilter !== "ALL" && (c.status || "Active") !== statusFilter) return false;
+      return true;
+    });
+  }, [companies, selectedOrgId, tierFilter, statusFilter]);
+
+  // Filtered Department Distribution
+  const filteredDeptDist = useMemo(() => {
+    if (deptFilter === "ALL") return deptDist;
+    return deptDist.filter((d: any) => d.department === deptFilter);
+  }, [deptDist, deptFilter]);
+
+  // ════════════════════════════════════════════════════════════════
+  // SUPER 3D CUSTOM RENDERERS & CONFIGURATIONS
+  // ════════════════════════════════════════════════════════════════
+  
+  // Custom ECharts 3D Cylinder Renderer for authentic isometric 3D Bar Columns
+  const render3DCylinder = (params: any, api: any) => {
+    const location = api.coord([api.value(0), api.value(1)]);
+    const extent = api.coord([api.value(0), 0]);
+    const x = location[0];
+    const y = location[1];
+    const bottomY = extent[1];
+    const rawWidth = api.size([1, 0])[0];
+    const width = Math.min(Math.max(rawWidth * 0.38, 24), 64);
+    const rx = width / 2;
+    const ry = Math.max(width / 3.5, 6);
+
+    const colorHex = api.visual("color") || "#22d3ee";
+
+    if (bottomY - y <= 0) return null;
+
+    return {
+      type: "group",
+      children: [
+        // 1. Bottom Base Shadow Disc
+        {
+          type: "ellipse",
+          shape: { cx: x, cy: bottomY, rx: rx * 1.2, ry: ry * 1.2 },
+          style: { fill: "rgba(0, 0, 0, 0.4)" }
+        },
+        // 2. Cylinder Bottom Cap
+        {
+          type: "ellipse",
+          shape: { cx: x, cy: bottomY, rx: rx, ry: ry },
+          style: { fill: colorHex }
+        },
+        // 3. Cylinder Vertical Column Wall with Side Shading & Specular Reflective Center
+        {
+          type: "rect",
+          shape: { x: x - rx, y: y, width: width, height: Math.max(bottomY - y, 2) },
+          style: {
+            fill: new echarts.graphic.LinearGradient(0, 0, 1, 0, [
+              { offset: 0, color: colorHex },
+              { offset: 0.3, color: "#ffffff" },
+              { offset: 0.6, color: colorHex },
+              { offset: 1, color: "#09090b" }
+            ])
+          }
+        },
+        {
+          type: "ellipse",
+          shape: { cx: x, cy: y, rx: rx, ry: ry },
+          style: {
+            fill: new echarts.graphic.RadialGradient(0.35, 0.35, 0.65, [
+              { offset: 0, color: "#ffffff" },
+              { offset: 0.45, color: colorHex },
+              { offset: 1, color: colorHex }
+            ]),
+            stroke: "rgba(255, 255, 255, 0.8)",
+            lineWidth: 1.5
+          }
+        }
+      ]
+    };
+  };
+
+  const freeCount = filteredCompanies.filter((c: any) => c.subscription_tier === "Free" || !c.subscription_tier).length;
+  const bizCount = filteredCompanies.filter((c: any) => c.subscription_tier === "Business").length;
+  const entCount = filteredCompanies.filter((c: any) => c.subscription_tier === "Enterprise").length;
+  const totalOrgsNum = filteredCompanies.length;
+
+  const concentric3DDonutOption = {
+    animation: false,
+    backgroundColor: "transparent",
+    tooltip: {
+      trigger: "item",
+      backgroundColor: "#18181b",
+      borderColor: "#3f3f46",
+      borderWidth: 1,
+      textStyle: { color: "#f4f4f5", fontSize: 12, fontFamily: "Inter" },
+      borderRadius: 8,
+      padding: [10, 14],
+      formatter: "{b}: <b style='color:#38bdf8;'>{c} Orgs</b> ({d}%)"
+    },
+    legend: {
+      bottom: "2%",
+      left: "center",
+      textStyle: { color: "#71717a", fontSize: 11, fontWeight: 700 },
+      itemGap: 16,
+      icon: "circle",
+      itemWidth: 10,
+      itemHeight: 10
+    },
+    series: [
+      {
+        name: "Subscription Tiers",
+        type: "pie",
+        radius: ["52%", "78%"],
+        center: ["50%", "44%"],
+        avoidLabelOverlap: true,
+        animation: false,
+        padAngle: 3,
+        itemStyle: {
+          borderRadius: 8,
+          borderColor: "transparent",
+          borderWidth: 3
+        },
+        label: {
+          show: true,
+          position: "center",
+          formatter: () => `{lbl|Total}\n{val|${totalOrgsNum}}`,
+          rich: {
+            lbl: { fontSize: 13, fontWeight: 700, color: "#94a3b8", fontFamily: "Inter", lineHeight: 22 },
+            val: { fontSize: 32, fontWeight: 900, color: "#22d3ee", fontFamily: "Inter", lineHeight: 38 }
+          }
+        },
+        labelLine: {
+          show: true,
+          length: 12,
+          length2: 16,
+          lineStyle: { color: "#94a3b8", width: 1.5 }
+        },
+        data: [
+          { 
+            value: freeCount, 
+            name: "Free Tier", 
+            label: {
+              show: true,
+              formatter: "{b}\n{d}%",
+              color: "#0284c7",
+              fontWeight: 700,
+              fontSize: 11
+            },
+            itemStyle: { color: "#38bdf8" } 
+          },
+          { 
+            value: bizCount, 
+            name: "Business Tier", 
+            label: {
+              show: true,
+              formatter: "{b}\n{d}%",
+              color: "#4f46e5",
+              fontWeight: 700,
+              fontSize: 11
+            },
+            itemStyle: { color: "#818cf8" } 
+          },
+          { 
+            value: entCount, 
+            name: "Enterprise Tier", 
+            label: {
+              show: true,
+              formatter: "{b}\n{d}%",
+              color: "#9333ea",
+              fontWeight: 700,
+              fontSize: 11
+            },
+            itemStyle: { color: "#c084fc" } 
+          }
+        ]
+      }
+    ]
+  };
+
+  const companyNames = filteredCompanies.length ? filteredCompanies.map((c: any) => c.name) : ["Default Org"];
+  const companyQuotas = filteredCompanies.length ? filteredCompanies.map((c: any) => c.max_employees || 50) : [50];
+
+  const bar3DCylinderOption = {
+    animation: false,
+    backgroundColor: "transparent",
+    tooltip: {
+      trigger: "axis",
+      axisPointer: { type: "shadow" },
+      backgroundColor: "#18181b",
+      borderColor: "#3f3f46",
+      borderWidth: 1,
+      textStyle: { color: "#f4f4f5", fontSize: 12 },
+      borderRadius: 8,
+      padding: [10, 14],
+      formatter: (params: any) => {
+        const item = params[0];
+        return `<div style="font-weight:800; margin-bottom:2px; color:#f4f4f5;">${item.name}</div>
+                <div style="color:#38bdf8; font-weight:700;">Quota Capacity: <b>${item.value} Staff</b></div>`;
+      }
+    },
+    grid: { left: "4%", right: "4%", bottom: "16%", top: "14%", containLabel: true },
+    xAxis: {
+      type: "category",
+      data: companyNames,
+      axisLabel: { color: "#71717a", fontSize: 11, fontWeight: 700, margin: 16 },
+      axisLine: { lineStyle: { color: "#a1a1aa", width: 1.5 } },
+      axisTick: { show: false }
+    },
+    yAxis: {
+      type: "value",
+      axisLabel: { color: "#71717a", fontSize: 10, fontWeight: 600 },
+      splitLine: { lineStyle: { color: "rgba(113, 113, 122, 0.2)", type: "dashed" } }
+    },
+    series: [
+      {
+        type: "bar",
+        itemStyle: { color: "rgba(113, 113, 122, 0.15)", borderRadius: [10, 10, 0, 0] },
+        barGap: "-100%",
+        barWidth: "32%",
+        data: companyQuotas.map(() => Math.max(...companyQuotas, 500) * 1.1),
+        animation: false,
+        silent: true
+      },
+      {
+        name: "Max Capacity Quota",
+        type: "bar",
+        barWidth: "32%",
+        data: companyQuotas,
+        itemStyle: {
+          borderRadius: [10, 10, 0, 0],
+          color: (params: any) => {
+            const colors = [
+              [{ offset: 0, color: "#38bdf8" }, { offset: 1, color: "#0284c7" }],
+              [{ offset: 0, color: "#818cf8" }, { offset: 1, color: "#4f46e5" }],
+              [{ offset: 0, color: "#34d399" }, { offset: 1, color: "#059669" }],
+              [{ offset: 0, color: "#fbbf24" }, { offset: 1, color: "#d97706" }],
+              [{ offset: 0, color: "#f472b6" }, { offset: 1, color: "#db2777" }]
+            ];
+            const chosen = colors[params.dataIndex % colors.length];
+            return new echarts.graphic.LinearGradient(0, 0, 0, 1, chosen);
+          }
+        }
+      }
+    ]
+  };
+
+  const trendDates = trends.map((t: any) => {
+    const d = new Date(t.date);
+    return days <= 7 
+      ? d.toLocaleDateString("en-US", { weekday: "short" }) 
+      : d.toLocaleDateString("en-US", { month: "short", day: "numeric" });
+  });
+
+  const attendance3DLineOption = {
+    animation: false,
+    backgroundColor: "transparent",
+    tooltip: {
+      trigger: "axis",
+      backgroundColor: "#18181b",
+      borderColor: "#3f3f46",
+      borderWidth: 1,
+      textStyle: { color: "#f4f4f5", fontSize: 12 },
+      borderRadius: 8,
+      padding: [10, 14]
+    },
+    legend: {
+      top: "0%",
+      right: "0%",
+      textStyle: { color: "#71717a", fontSize: 11, fontWeight: 700 },
+      icon: "circle",
+      itemGap: 16
+    },
+    grid: { left: "2%", right: "3%", bottom: "4%", top: "16%", containLabel: true },
+    xAxis: {
+      type: "category",
+      boundaryGap: false,
+      data: trendDates.length ? trendDates : ["Mon", "Tue", "Wed", "Thu", "Fri"],
+      axisLabel: { color: "#71717a", fontSize: 11, fontWeight: 700 },
+      axisLine: { lineStyle: { color: "#a1a1aa", width: 1.5 } }
+    },
+    yAxis: {
+      type: "value",
+      axisLabel: { color: "#71717a", fontSize: 10, fontWeight: 600 },
+      splitLine: { lineStyle: { color: "rgba(113, 113, 122, 0.2)", type: "dashed" } }
+    },
+    series: [
+      {
+        name: "Present Staff",
+        type: "line",
+        smooth: 0.3,
+        showSymbol: true,
+        symbol: "circle",
+        symbolSize: 10,
+        itemStyle: { color: "#06b6d4", borderWidth: 3, borderColor: "#ffffff" },
+        lineStyle: { width: 4, color: "#06b6d4" },
+        areaStyle: {
+          color: new echarts.graphic.LinearGradient(0, 0, 0, 1, [
+            { offset: 0, color: "rgba(6, 182, 212, 0.45)" },
+            { offset: 0.7, color: "rgba(6, 182, 212, 0.05)" },
+            { offset: 1, color: "rgba(6, 182, 212, 0)" }
+          ])
+        },
+        data: trends.map((t: any) => t.present)
+      },
+      {
+        name: "Late Arrival",
+        type: "line",
+        smooth: 0.3,
+        showSymbol: true,
+        symbol: "diamond",
+        symbolSize: 8,
+        itemStyle: { color: "#f59e0b", borderWidth: 2, borderColor: "#ffffff" },
+        lineStyle: { width: 3, type: "dashed", color: "#f59e0b" },
+        data: trends.map((t: any) => t.late)
+      }
+    ]
+  };
+
+  const dept3DBarOption = {
+    animation: false,
+    backgroundColor: "transparent",
+    tooltip: {
+      trigger: "axis",
+      axisPointer: { type: "shadow" },
+      backgroundColor: "#18181b",
+      borderColor: "#3f3f46",
+      borderWidth: 1,
+      textStyle: { color: "#f4f4f5", fontSize: 12 }
+    },
+    legend: {
+      top: "0%",
+      right: "0%",
+      textStyle: { color: "#71717a", fontSize: 11, fontWeight: 700 }
+    },
+    grid: { left: "2%", right: "4%", bottom: "12%", top: "16%", containLabel: true },
+    xAxis: {
+      type: "category",
+      data: filteredDeptDist.map((d: any) => d.department),
+      axisLabel: { color: "#71717a", fontSize: 11, fontWeight: 700, margin: 14 }
+    },
+    yAxis: {
+      type: "value",
+      axisLabel: { color: "#71717a", fontSize: 10 }
+    },
+    series: [
+      {
+        name: "Present Today",
+        type: "bar",
+        barWidth: "30%",
+        itemStyle: { 
+          color: new echarts.graphic.LinearGradient(0, 0, 0, 1, [
+            { offset: 0, color: "#34d399" },
+            { offset: 1, color: "#059669" }
+          ]),
+          borderRadius: [8, 8, 0, 0] 
+        },
+        data: filteredDeptDist.map((d: any) => d.present_today)
+      }
+    ]
+  };
+
+  if (profileLoading) {
+    return (
+      <SidebarLayout>
+        <div className="min-h-[400px] flex items-center justify-center">
+          <Activity className="w-8 h-8 animate-spin text-zinc-500 dark:text-zinc-400" />
+        </div>
+      </SidebarLayout>
+    );
+  }
+
+  return (
+    <SidebarLayout>
+      <div className="space-y-6 page-enter pb-8">
+        
+        <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4 pb-4 border-b border-zinc-200 dark:border-zinc-800">
+          <div className="space-y-1">
+            <h1 className="text-xl font-extrabold text-zinc-900 dark:text-zinc-100 tracking-tight flex items-center gap-2">
+              <div className="p-2 rounded-xl bg-zinc-100 dark:bg-zinc-850 text-zinc-700 dark:text-zinc-300 border border-zinc-200 dark:border-zinc-800">
+                <TrendingUp className="w-5 h-5" />
+              </div>
+              Analytics
+            </h1>
+            <p className="text-zinc-500 dark:text-zinc-400 text-xs">
+              Platform performance and operational telemetry metrics
+            </p>
+          </div>
+
+          <button
+            onClick={handleRefreshAll}
+            disabled={isRefreshing}
+            className="p-2.5 bg-white dark:bg-zinc-900 hover:bg-zinc-100 dark:hover:bg-zinc-800 text-zinc-800 dark:text-zinc-200 rounded-xl cursor-pointer border border-zinc-200 dark:border-zinc-800 flex items-center gap-2 text-xs font-bold shadow-sm self-start sm:self-auto disabled:opacity-70"
+            title="Refresh Analytics"
+          >
+            <RefreshCw 
+              className={`w-4 h-4 text-cyan-500 dark:text-cyan-400 inline-block ${isRefreshing ? "animate-spin spin-icon" : ""}`} 
+              style={isRefreshing ? { animation: "spin-360 0.8s linear infinite", transformOrigin: "center" } : {}}
+            /> Refresh Data
+          </button>
+        </div>
+
+        <div className="p-4 rounded-xl bg-white dark:bg-zinc-900 border border-zinc-200 dark:border-zinc-800 flex flex-wrap items-center gap-4 shadow-sm">
+          <div className="flex items-center gap-2 text-xs font-bold text-zinc-800 dark:text-zinc-200 uppercase tracking-wider pr-3 border-r border-zinc-200 dark:border-zinc-800">
+            <Filter className="w-4 h-4 text-cyan-500 dark:text-cyan-400" /> Filters
+          </div>
+
+          <div className="flex items-center gap-1.5 bg-zinc-100 dark:bg-zinc-950 border border-zinc-200 dark:border-zinc-800 p-1 rounded-xl shrink-0">
+            <span className="text-xs font-extrabold text-cyan-600 dark:text-cyan-400 px-2 flex items-center gap-1.5 uppercase tracking-wider shrink-0">
+              <Calendar className="w-4 h-4 text-cyan-500 dark:text-cyan-400" /> Range:
+            </span>
+            {[
+              { label: "7D", val: 7 },
+              { label: "30D", val: 30 },
+              { label: "90D", val: 90 },
+              { label: "1Y", val: 365 },
+            ].map((item) => (
+              <button
+                key={item.label}
+                onClick={() => setDays(item.val)}
+                className={`px-3 py-1 text-xs font-black rounded-lg cursor-pointer shrink-0 border transition-all ${
+                  days === item.val
+                    ? "bg-zinc-100 dark:bg-zinc-700 text-zinc-900 dark:text-zinc-100 border-zinc-900 dark:border-zinc-100"
+                    : "bg-white dark:bg-zinc-800 text-zinc-800 dark:text-zinc-200 border-zinc-200 dark:border-zinc-700 hover:bg-zinc-100 dark:hover:bg-zinc-700"
+                }`}
+              >
+                {item.label}
+              </button>
+            ))}
+          </div>
+
+          {isSuperAdmin && companies.length > 0 && (
+            <div className="flex items-center gap-2">
+              <span className="text-xs font-bold text-zinc-600 dark:text-zinc-400">Org:</span>
+              <select
+                value={selectedOrgId}
+                onChange={(e) => setSelectedOrgId(e.target.value)}
+                className="bg-zinc-50 dark:bg-zinc-950 text-zinc-900 dark:text-zinc-100 border border-zinc-200 dark:border-zinc-800 text-xs font-bold rounded-lg pl-3 pr-8 py-1.5 focus:border-cyan-500 cursor-pointer"
+              >
+                <option value="ALL">All Organizations ({companies.length})</option>
+                {companies.map((c: any) => (
+                  <option key={c.id} value={c.id.toString()}>
+                    {c.name}
+                  </option>
+                ))}
+              </select>
+            </div>
+          )}
+
+          {isSuperAdmin && (
+            <div className="flex items-center gap-2">
+              <span className="text-xs font-bold text-zinc-600 dark:text-zinc-400">Tier:</span>
+              <select
+                value={tierFilter}
+                onChange={(e) => setTierFilter(e.target.value)}
+                className="bg-zinc-50 dark:bg-zinc-950 text-zinc-900 dark:text-zinc-100 border border-zinc-200 dark:border-zinc-800 text-xs font-bold rounded-lg pl-3 pr-8 py-1.5 focus:border-cyan-500 cursor-pointer"
+              >
+                <option value="ALL">All Tiers</option>
+                <option value="Free">Free Tier</option>
+                <option value="Business">Business Tier</option>
+                <option value="Enterprise">Enterprise Tier</option>
+              </select>
+            </div>
+          )}
+
+          {isSuperAdmin && (
+            <div className="flex items-center gap-2">
+              <span className="text-xs font-bold text-zinc-600 dark:text-zinc-400">Status:</span>
+              <select
+                value={statusFilter}
+                onChange={(e) => setStatusFilter(e.target.value)}
+                className="bg-zinc-50 dark:bg-zinc-950 text-zinc-900 dark:text-zinc-100 border border-zinc-200 dark:border-zinc-800 text-xs font-bold rounded-lg pl-3 pr-8 py-1.5 focus:border-cyan-500 cursor-pointer"
+              >
+                <option value="ALL">All Statuses</option>
+                <option value="Active">Active</option>
+                <option value="Inactive">Inactive</option>
+              </select>
+            </div>
+          )}
+
+          {!isSuperAdmin && deptDist.length > 0 && (
+            <div className="flex items-center gap-2">
+              <span className="text-xs font-bold text-zinc-600 dark:text-zinc-400">Department:</span>
+              <select
+                value={deptFilter}
+                onChange={(e) => setDeptFilter(e.target.value)}
+                className="bg-zinc-50 dark:bg-zinc-950 text-zinc-900 dark:text-zinc-100 border border-zinc-200 dark:border-zinc-800 text-xs font-bold rounded-lg pl-3 pr-8 py-1.5 focus:border-cyan-500 cursor-pointer"
+              >
+                <option value="ALL">All Departments</option>
+                {deptDist.map((d: any) => (
+                  <option key={d.department} value={d.department}>
+                    {d.department}
+                  </option>
+                ))}
+              </select>
+            </div>
+          )}
+
+          <button
+            onClick={handleResetFilters}
+            className="ml-auto px-3.5 py-1.5 bg-zinc-100 dark:bg-zinc-800 hover:bg-zinc-200 dark:hover:bg-zinc-700 text-zinc-800 dark:text-zinc-200 text-xs font-bold rounded-lg cursor-pointer flex items-center gap-1 border border-zinc-200 dark:border-zinc-700 shadow-sm"
+          >
+            <RotateCcw className="w-3.5 h-3.5 text-zinc-600 dark:text-zinc-400" /> Reset
+          </button>
+        </div>
+
+        {isSuperAdmin ? (
+          <>
+            <div className="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-4">
+              
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Onboarded Organizations
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <Building2 className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {filteredCompanies.length}
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-bold text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    Active: {filteredCompanies.filter((c: any) => (c.status || "Active") === "Active").length}
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  Registered SaaS platform tenants
+                </p>
+              </div>
+
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Total Enrolled Employees
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <Users className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {summary?.total_employees || 0}
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-bold text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    Cross-Org Combined
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  Multi-tenant registered staff count
+                </p>
+              </div>
+
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Platform AI Scan Telemetry
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <CheckCircle className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {recognition?.total_scans || 0}
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-mono font-bold text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    <Zap className="w-3 h-3 mr-0.5" /> {recognition?.average_processing_time_ms || 120}ms
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  512-dim facial verification throughput
+                </p>
+              </div>
+
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Multi-Tenant Spoof Shield
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <ShieldCheck className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {recognition?.spoof_attempts || 0}
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-bold text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    Attempts Blocked
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  Global kiosk liveness filter
+                </p>
+              </div>
+
+            </div>
+
+            <div className="grid grid-cols-1 lg:grid-cols-3 gap-6">
+              
+              <div className="tech-card-3d-minimal p-5 space-y-4">
+                <div className="flex items-center justify-between border-b border-zinc-100 dark:border-zinc-800 pb-3">
+                  <div className="flex items-center gap-2">
+                    <Layers className="w-4 h-4 text-zinc-500 dark:text-zinc-400" />
+                    <h3 className="text-xs font-black uppercase text-zinc-900 dark:text-zinc-100 tracking-wider">
+                      Subscription Tier Distribution
+                    </h3>
+                  </div>
+                </div>
+                <ReactECharts option={concentric3DDonutOption} style={{ height: "320px" }} />
+              </div>
+
+              <div className="tech-card-3d-minimal lg:col-span-2 p-5 space-y-4">
+                <div className="flex items-center justify-between border-b border-zinc-100 dark:border-zinc-800 pb-3">
+                  <div className="flex items-center gap-2">
+                    <BarChart3 className="w-4 h-4 text-zinc-500 dark:text-zinc-400" />
+                    <h3 className="text-xs font-black uppercase text-zinc-900 dark:text-zinc-100 tracking-wider">
+                      Organization Employee Quota Allocations
+                    </h3>
+                  </div>
+                  <span className="text-[10px] font-mono text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-800 px-2 py-0.5 rounded border border-zinc-200 dark:border-zinc-700">
+                    Live Platform Allocations
+                  </span>
+                </div>
+                <ReactECharts option={bar3DCylinderOption} style={{ height: "320px" }} />
+              </div>
+
+            </div>
+          </>
+        ) : (
+          <>
+            <div className="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-4 gap-4">
+              
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Attendance Rate
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <Activity className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {summary?.attendance_percentage || 0}%
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-bold text-zinc-705 dark:text-zinc-305 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    Present: {summary?.present_today || 0}
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  Daily active staff attendance
+                </p>
+              </div>
+
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Staff Strength
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <Users className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {summary?.total_employees || 0}
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-bold text-zinc-705 dark:text-zinc-305 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    Late: {summary?.late_today || 0}
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  Active company personnel
+                </p>
+              </div>
+
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Biometric Accuracy
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <CheckCircle className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {recognition?.average_confidence ? (recognition.average_confidence * 100).toFixed(1) : 98.5}%
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-mono font-bold text-zinc-705 dark:text-zinc-305 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    <Zap className="w-3 h-3 mr-0.5" /> {recognition?.average_processing_time_ms || 120}ms
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  512-dim facial vector confidence
+                </p>
+              </div>
+
+              <div className="tech-card-3d-minimal p-4 relative overflow-hidden">
+                <div className="flex justify-between items-start">
+                  <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-500 dark:text-zinc-400">
+                    Spoof Attempts Blocked
+                  </span>
+                  <div className="p-2.5 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-600 dark:text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                    <ShieldCheck className="w-4 h-4" />
+                  </div>
+                </div>
+                <div className="mt-3 flex items-baseline justify-between">
+                  <p className="text-3xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">
+                    {recognition?.spoof_attempts || 0}
+                  </p>
+                  <span className="inline-flex items-center text-[10px] font-bold text-zinc-705 dark:text-zinc-305 bg-zinc-100 dark:bg-zinc-800 px-2.5 py-0.5 rounded-full border border-zinc-200 dark:border-zinc-700">
+                    Liveness Active
+                  </span>
+                </div>
+                <p className="text-[10px] text-zinc-500 dark:text-zinc-400 mt-2 font-medium">
+                  Kiosk scanner protection
+                </p>
+              </div>
+
+            </div>
+
+            <div className="grid grid-cols-1 lg:grid-cols-3 gap-6">
+              
+              <div className="tech-card-3d-minimal lg:col-span-2 p-5 space-y-4">
+                <div className="flex items-center justify-between border-b border-zinc-100 dark:border-zinc-800 pb-3">
+                  <div className="flex items-center gap-2">
+                    <BarChart3 className="w-4 h-4 text-zinc-500 dark:text-zinc-450" />
+                    <h3 className="text-xs font-black uppercase text-zinc-900 dark:text-zinc-100 tracking-wider">
+                      Attendance Dynamics Curve ({days} Days)
+                    </h3>
+                  </div>
+                  <span className="text-[10px] font-mono text-zinc-700 dark:text-zinc-300 bg-zinc-100 dark:bg-zinc-800 px-2 py-0.5 rounded border border-zinc-200 dark:border-zinc-700">
+                    Database Live Feed
+                  </span>
+                </div>
+                <ReactECharts option={attendance3DLineOption} style={{ height: "300px" }} />
+              </div>
+
+              <div className="tech-card-3d-minimal p-5 space-y-4">
+                <div className="flex items-center gap-2 border-b border-zinc-800 pb-3">
+                  <Building2 className="w-4 h-4 text-zinc-500 dark:text-zinc-450" />
+                  <h3 className="text-xs font-black uppercase text-zinc-100 tracking-wider">
+                    3D Isometric Department Cylinders
+                  </h3>
+                </div>
+                <ReactECharts option={dept3DBarOption} style={{ height: "300px" }} />
+              </div>
+
+            </div>
+          </>
+        )}
+
+      </div>
+    </SidebarLayout>
+  );
+}

frontend/app/attendance/page.tsx

@@ -223,14 +223,14 @@ export default function AttendancePage() {
 
         {/* Table */}
         {activeTab === "feed" ? (
-          <div className="glass-card rounded-2xl border border-white/6 overflow-hidden">
-            <div className="px-5 py-3.5 border-b border-white/5 bg-white/[0.005]">
+          <div className="tech-card-3d-minimal bg-white overflow-hidden">
+            <div className="px-5 py-3.5 border-b border-slate-200/80 dark:border-zinc-800 bg-slate-50/50 dark:bg-zinc-900/50">
               <p className="text-[11px] text-slate-500 font-mono">
                 {loadingFeed ? "Fetching..." : `${filtered?.length || 0} ledger records for ${selectedDate}`}
               </p>
             </div>
             
-            <div className="overflow-x-auto">
+            <div className="overflow-x-auto min-h-[350px]">
               <table className="data-table">
                 <thead>
                   <tr>
@@ -307,14 +307,14 @@ export default function AttendancePage() {
             </div>
           </div>
         ) : (
-          <div className="glass-card rounded-2xl border border-white/6 overflow-hidden">
-            <div className="px-5 py-3.5 border-b border-white/5 bg-white/[0.005]">
+          <div className="tech-card-3d-minimal bg-white overflow-hidden">
+            <div className="px-5 py-3.5 border-b border-slate-200/80 dark:border-zinc-800 bg-slate-50/50 dark:bg-zinc-900/50">
               <p className="text-[11px] text-slate-500 font-mono">
                 {loadingLogs ? "Fetching..." : `${rawLogs?.length || 0} swipe events for ${selectedDate}`}
               </p>
             </div>
             
-            <div className="overflow-x-auto">
+            <div className="overflow-x-auto min-h-[350px]">
               <table className="data-table">
                 <thead>
                   <tr>

frontend/app/audit/page.tsx

@@ -1,17 +1,18 @@
 "use client";
 
 import React, { useState } from "react";
-import { useQuery } from "@tanstack/react-query";
+import { useQuery, useQueryClient } from "@tanstack/react-query";
 import SidebarLayout from "@/components/SidebarLayout";
 import { fetchApi, parseDateTime } from "@/app/utils/api";
 import { 
   History, Search, RefreshCw, ChevronLeft, ChevronRight, 
-  ShieldAlert, Activity, Key, UserPlus, Sliders, Laptop, Trash2
+  ShieldAlert, Activity, Key, UserPlus, Sliders, Laptop, Trash2,
+  Lock, AlertTriangle, ShieldCheck, CheckCircle2, FileText
 } from "lucide-react";
 import { useToast } from "@/app/utils/toast";
 
-
 export default function AuditLogsPage() {
+  const queryClient = useQueryClient();
   const [page, setPage] = useState(0);
   const limit = 20;
   const [search, setSearch] = useState("");
@@ -32,6 +33,8 @@ export default function AuditLogsPage() {
       await fetchApi("/audit/", { method: "DELETE" });
       toast.success("Audit logs cleared successfully.");
       setShowClearConfirm(false);
+      setPage(0);
+      await queryClient.invalidateQueries({ queryKey: ["audit-logs"] });
       refetch();
     } catch (err: any) {
       toast.error(err.message || "Failed to clear audit logs");
@@ -40,85 +43,187 @@ export default function AuditLogsPage() {
     }
   };
 
-
-
   const filteredLogs = logs?.filter((log: any) => {
     if (!search) return true;
     const term = search.toLowerCase();
     const actionMatch = log.action?.toLowerCase().includes(term);
     const userMatch = log.user?.email?.toLowerCase().includes(term);
     const detailsMatch = log.details?.toLowerCase().includes(term);
-    return actionMatch || userMatch || detailsMatch;
+    const ipMatch = log.ip_address?.toLowerCase().includes(term);
+    return actionMatch || userMatch || detailsMatch || ipMatch;
   });
 
-  // Helper to map log actions to modern icons
-  const getActionIcon = (action: string) => {
+  // Calculate statistics metrics
+  const totalCount = logs?.length || 0;
+  const loginCount = logs?.filter((l: any) => l.action?.toLowerCase().includes("login") || l.action?.toLowerCase().includes("auth")).length || 0;
+  const configCount = logs?.filter((l: any) => l.action?.toLowerCase().includes("setting") || l.action?.toLowerCase().includes("update")).length || 0;
+  const alertCount = logs?.filter((l: any) => l.action?.toLowerCase().includes("delete") || l.action?.toLowerCase().includes("spoof") || l.action?.toLowerCase().includes("clear")).length || 0;
+
+  // Helper to map log actions to modern icons and badge colors
+  const getActionBadge = (action: string) => {
     const act = action.toLowerCase();
-    if (act.includes("login") || act.includes("auth")) return <Key className="w-4 h-4 text-emerald-600" />;
-    if (act.includes("create") || act.includes("enroll")) return <UserPlus className="w-4 h-4 text-blue-600" />;
-    if (act.includes("delete")) return <ShieldAlert className="w-4 h-4 text-rose-600" />;
-    if (act.includes("setting") || act.includes("update")) return <Sliders className="w-4 h-4 text-amber-600" />;
-    return <Activity className="w-4 h-4 text-zinc-500" />;
+    if (act.includes("login") || act.includes("auth")) {
+      return (
+        <span className="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-lg text-xs font-semibold bg-emerald-500/10 text-emerald-600 dark:text-emerald-400 border border-emerald-500/20">
+          <Key className="w-3.5 h-3.5 text-emerald-500" /> {action}
+        </span>
+      );
+    }
+    if (act.includes("create") || act.includes("enroll") || act.includes("add")) {
+      return (
+        <span className="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-lg text-xs font-semibold bg-blue-500/10 text-blue-600 dark:text-blue-400 border border-blue-500/20">
+          <UserPlus className="w-3.5 h-3.5 text-blue-500" /> {action}
+        </span>
+      );
+    }
+    if (act.includes("delete") || act.includes("clear") || act.includes("remove")) {
+      return (
+        <span className="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-lg text-xs font-semibold bg-rose-500/10 text-rose-600 dark:text-rose-400 border border-rose-500/20">
+          <ShieldAlert className="w-3.5 h-3.5 text-rose-500" /> {action}
+        </span>
+      );
+    }
+    if (act.includes("setting") || act.includes("update") || act.includes("policy")) {
+      return (
+        <span className="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-lg text-xs font-semibold bg-amber-500/10 text-amber-600 dark:text-amber-400 border border-amber-500/20">
+          <Sliders className="w-3.5 h-3.5 text-amber-500" /> {action}
+        </span>
+      );
+    }
+    return (
+      <span className="inline-flex items-center gap-1.5 px-2.5 py-1 rounded-lg text-xs font-semibold bg-cyan-500/10 text-cyan-600 dark:text-cyan-400 border border-cyan-500/20">
+        <Activity className="w-3.5 h-3.5 text-cyan-500" /> {action}
+      </span>
+    );
+  };
+
+  const [isRefreshing, setIsRefreshing] = useState(false);
+
+  const handleRefresh = async () => {
+    setIsRefreshing(true);
+    try {
+      await queryClient.invalidateQueries({ queryKey: ["audit-logs"] });
+      await refetch();
+    } catch (e) {
+      console.error(e);
+    } finally {
+      setTimeout(() => setIsRefreshing(false), 800);
+    }
   };
 
   return (
     <SidebarLayout>
-      <div className="space-y-6 page-enter">
-        {/* Header */}
-        <div className="flex flex-col sm:flex-row sm:items-center justify-between gap-4 pb-5 border-b border-zinc-100">
-          <div>
-            <h1 className="text-xl font-bold text-zinc-900 tracking-tight flex items-center gap-2">
-              <History className="w-5 h-5 text-zinc-700" />
-              System Audit Logs
+      <div className="space-y-6 page-enter pb-8">
+        
+        {/* Header Section */}
+        <div className="flex flex-col sm:flex-row sm:items-center justify-between gap-4 pb-4 border-b border-zinc-200 dark:border-zinc-800">
+          <div className="space-y-1">
+            <h1 className="text-xl font-extrabold text-zinc-900 dark:text-zinc-100 tracking-tight flex items-center gap-2">
+              <div className="p-2 rounded-xl bg-cyan-500/10 text-cyan-500 border border-cyan-500/20">
+                <History className="w-5 h-5" />
+              </div>
+              System Audit Logs & Security Telemetry
             </h1>
+            <p className="text-zinc-500 dark:text-zinc-400 text-xs">
+              Complete immutable event history, administrative action trails, and device authentication logs
+            </p>
           </div>
+
           <div className="flex items-center gap-2">
             <button
-              onClick={() => setShowClearConfirm(true)}
-              disabled={isDeleting}
-              className="text-[12px] h-10 px-5 flex items-center gap-2 rounded-xl bg-gradient-to-r from-red-600 to-rose-600 text-white hover:opacity-90 active:scale-95 shadow-md shadow-red-950/20 border border-red-500/20 cursor-pointer transition-all font-bold"
+              onClick={handleRefresh}
+              disabled={isRefreshing}
+              className="px-3.5 py-2 bg-zinc-100 dark:bg-zinc-800 hover:bg-zinc-200 dark:hover:bg-zinc-700 text-zinc-700 dark:text-zinc-200 font-bold text-xs rounded-xl border border-zinc-200 dark:border-zinc-700/60 cursor-pointer transition-all active:scale-95 flex items-center gap-1.5 disabled:opacity-70"
             >
-              <Trash2 className="w-3.5 h-3.5" />
-              Clear Logs
+              <RefreshCw 
+                className={`w-3.5 h-3.5 text-cyan-500 inline-block ${isRefreshing ? "animate-spin spin-icon" : ""}`}
+                style={isRefreshing ? { animation: "spin-360 0.8s linear infinite", transformOrigin: "center" } : {}}
+              />
+              Refresh Logs
             </button>
             <button
-              onClick={() => refetch()}
-              className="btn-ghost text-[12px] h-9.5 px-4 flex items-center gap-2 rounded-xl border border-zinc-200 hover:bg-zinc-50 text-zinc-700 cursor-pointer transition-all active:scale-95"
+              onClick={() => setShowClearConfirm(true)}
+              disabled={isDeleting}
+              className="px-4 py-2 bg-rose-600 hover:bg-rose-700 text-white font-extrabold text-xs rounded-xl shadow-xs flex items-center gap-1.5 cursor-pointer active:scale-95 transition-all"
             >
-              <RefreshCw className="w-3.5 h-3.5" />
-              Refresh Logs
+              <Trash2 className="w-3.5 h-3.5" />
+              Clear Audit History
             </button>
           </div>
         </div>
 
+        {/* Audit Stats Counter Cards */}
+        <div className="grid grid-cols-2 lg:grid-cols-4 gap-3">
+          
+          <div className="tech-card-3d-minimal p-3.5 space-y-1">
+            <div className="flex justify-between items-center text-zinc-450 dark:text-zinc-500">
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">Total Recorded Events</span>
+              <FileText className="w-3.5 h-3.5" />
+            </div>
+            <p className="text-2xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">{totalCount}</p>
+          </div>
+
+          <div className="tech-card-3d-minimal p-3.5 space-y-1">
+            <div className="flex justify-between items-center text-zinc-450 dark:text-zinc-500">
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">Auth & Logins</span>
+              <Key className="w-3.5 h-3.5" />
+            </div>
+            <p className="text-2xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">{loginCount}</p>
+          </div>
+
+          <div className="tech-card-3d-minimal p-3.5 space-y-1">
+            <div className="flex justify-between items-center text-zinc-450 dark:text-zinc-500">
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">Config Updates</span>
+              <Sliders className="w-3.5 h-3.5" />
+            </div>
+            <p className="text-2xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">{configCount}</p>
+          </div>
+
+          <div className="tech-card-3d-minimal p-3.5 space-y-1">
+            <div className="flex justify-between items-center text-zinc-450 dark:text-zinc-500">
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">Critical Alerts</span>
+              <ShieldAlert className="w-3.5 h-3.5" />
+            </div>
+            <p className="text-2xl font-black text-zinc-900 dark:text-zinc-100 tracking-tight">{alertCount}</p>
+          </div>
+
+        </div>
+
         {/* Filter Bar */}
-        <div className="relative max-w-md">
-          <Search className="absolute left-3.5 top-1/2 -translate-y-1/2 w-4 h-4 text-zinc-400 pointer-events-none" />
-          <input
-            type="text"
-            placeholder="Search by action, email, or details..."
-            value={search}
-            onChange={(e) => setSearch(e.target.value)}
-            className="input-field h-9.5 pl-10 text-[12.5px] bg-white border-zinc-200 focus:border-zinc-800 text-zinc-900 rounded-xl transition-all w-full shadow-sm"
-          />
+        <div className="flex flex-col sm:flex-row items-center justify-between gap-3">
+          <div className="relative w-full max-w-md">
+            <Search className="absolute left-3.5 top-3 w-4 h-4 text-zinc-400 pointer-events-none" />
+            <input
+              type="text"
+              placeholder="Search by action, email, details, or IP address..."
+              value={search}
+              onChange={(e) => setSearch(e.target.value)}
+              style={{ paddingLeft: "2.4rem" }}
+              className="w-full h-10 pr-3.5 text-xs bg-white dark:bg-zinc-900 border border-zinc-200 dark:border-zinc-800 rounded-xl text-zinc-900 dark:text-zinc-100 focus:outline-none focus:border-cyan-500 transition-all"
+            />
+          </div>
+
+          <span className="text-xs font-mono font-bold text-zinc-400 self-end sm:self-center">
+            Showing Page {page + 1} ({filteredLogs?.length || 0} entries)
+          </span>
         </div>
 
-        {/* Audit Log Table */}
-        <div className="glass-card rounded-2xl border border-zinc-200 overflow-hidden shadow-sm bg-white">
+        {/* Audit Log Data Table Container */}
+        <div className="tech-card-3d-minimal overflow-hidden">
           <div className="overflow-x-auto">
-            <table className="w-full text-left border-collapse text-[12px]">
+            <table className="w-full text-left border-collapse text-xs">
               <thead>
-                <tr className="border-b border-zinc-200 bg-zinc-50 text-zinc-500 uppercase tracking-wider font-mono text-[10px] font-bold">
-                  <th className="py-3 px-5 w-[140px]">Timestamp</th>
-                  <th className="py-3 px-5 w-[180px]">Action</th>
-                  <th className="py-3 px-5 w-[220px]">Actor</th>
-                  <th className="py-3 px-5">Details</th>
-                  <th className="py-3 px-5 w-[140px]">IP Address</th>
+                <tr className="border-b border-zinc-200 dark:border-zinc-800 bg-zinc-50 dark:bg-zinc-950/80 text-zinc-500 dark:text-zinc-400 uppercase tracking-wider font-mono text-[10px] font-bold">
+                  <th className="py-3.5 px-5 w-[160px]">Timestamp</th>
+                  <th className="py-3.5 px-5 w-[200px]">Action Performed</th>
+                  <th className="py-3.5 px-5 w-[220px]">Actor Email</th>
+                  <th className="py-3.5 px-5">Event Details</th>
+                  <th className="py-3.5 px-5 w-[140px] text-right">IP Address</th>
                 </tr>
               </thead>
-              <tbody className="divide-y divide-zinc-150 text-zinc-700">
+              <tbody className="divide-y divide-zinc-200/60 dark:divide-zinc-800/60 text-zinc-700 dark:text-zinc-300">
                 {isLoading ? (
-                  Array.from({ length: 8 }).map((_, i) => (
+                  Array.from({ length: 7 }).map((_, i) => (
                     <tr key={i}>
                       {Array.from({ length: 5 }).map((_, j) => (
                         <td key={j} className="py-4 px-5">
@@ -129,33 +234,36 @@ export default function AuditLogsPage() {
                   ))
                 ) : !filteredLogs || filteredLogs.length === 0 ? (
                   <tr>
-                    <td colSpan={5} className="py-20 text-center text-zinc-400 font-medium font-mono">
-                      No audit logs found.
+                    <td colSpan={5} className="py-20 text-center space-y-3">
+                      <div className="w-14 h-14 rounded-full bg-zinc-100 dark:bg-zinc-800 flex items-center justify-center mx-auto text-zinc-400">
+                        <History className="w-7 h-7" />
+                      </div>
+                      <div className="space-y-1">
+                        <h3 className="text-xs font-bold text-zinc-700 dark:text-zinc-300">No audit logs found</h3>
+                        <p className="text-[10px] text-zinc-400">Try adjusting your search filters or refresh logs</p>
+                      </div>
                     </td>
                   </tr>
                 ) : (
                   filteredLogs.map((log: any) => (
-                    <tr key={log.id} className="hover:bg-zinc-50/50 transition-colors">
-                      <td className="py-3.5 px-5 font-mono text-zinc-500 text-[11px]">
+                    <tr key={log.id} className="hover:bg-zinc-50 dark:hover:bg-zinc-800/40 transition-colors">
+                      <td className="py-3.5 px-5 font-mono text-zinc-500 dark:text-zinc-400 text-[11px] whitespace-nowrap">
                         {log.timestamp ? parseDateTime(log.timestamp)?.toLocaleString() : "—"}
                       </td>
                       <td className="py-3.5 px-5">
-                        <div className="flex items-center gap-2">
-                          <div className="p-1.5 rounded-lg bg-zinc-100 border border-zinc-200/80">
-                            {getActionIcon(log.action)}
-                          </div>
-                          <span className="font-semibold text-zinc-900">{log.action}</span>
-                        </div>
+                        {getActionBadge(log.action)}
                       </td>
-                      <td className="py-3.5 px-5 text-zinc-650 font-medium">
-                        {log.user?.email || <span className="text-zinc-400 italic">System / Anonymous</span>}
+                      <td className="py-3.5 px-5 font-semibold text-zinc-900 dark:text-zinc-100">
+                        {log.user?.email || <span className="text-zinc-400 dark:text-zinc-500 italic font-normal">System / Automated</span>}
                       </td>
-                      <td className="py-3.5 px-5 text-zinc-600 pr-8">
+                      <td className="py-3.5 px-5 text-zinc-600 dark:text-zinc-300 pr-6 leading-relaxed">
                         {log.details}
                       </td>
-                      <td className="py-3.5 px-5 font-mono text-zinc-500 text-[11px] flex items-center gap-1.5">
-                        <Laptop className="w-3.5 h-3.5 text-zinc-400" />
-                        {log.ip_address || "Local"}
+                      <td className="py-3.5 px-5 font-mono text-zinc-500 dark:text-zinc-400 text-[11px] text-right whitespace-nowrap">
+                        <span className="inline-flex items-center gap-1 bg-zinc-100 dark:bg-zinc-800/80 px-2 py-0.5 rounded-md border border-zinc-200 dark:border-zinc-700/50">
+                          <Laptop className="w-3 h-3 text-zinc-400" />
+                          {log.ip_address || "Internal"}
+                        </span>
                       </td>
                     </tr>
                   ))
@@ -164,16 +272,17 @@ export default function AuditLogsPage() {
             </table>
           </div>
 
-          {/* Pagination */}
-          <div className="px-5 py-3.5 border-t border-zinc-100 bg-zinc-50/50 flex items-center justify-between">
-            <span className="text-xs text-zinc-500 font-mono">
+          {/* Clean Dark Mode Adaptive Footer Pagination */}
+          <div className="px-5 py-3.5 border-t border-zinc-200 dark:border-zinc-800 bg-white dark:bg-zinc-900 flex items-center justify-between">
+            <span className="text-xs font-mono text-zinc-500 dark:text-zinc-400 font-bold">
               Page {page + 1}
             </span>
             <div className="flex items-center gap-2">
               <button
                 onClick={() => setPage((old) => Math.max(old - 1, 0))}
                 disabled={page === 0}
-                className="btn-ghost p-1.5 rounded-lg border border-zinc-200 hover:bg-zinc-100 disabled:opacity-50 transition-all cursor-pointer"
+                className="p-2 rounded-xl border border-zinc-200 dark:border-zinc-700 bg-zinc-50 dark:bg-zinc-800 hover:bg-zinc-100 dark:hover:bg-zinc-700 text-zinc-700 dark:text-zinc-200 disabled:opacity-40 transition-all cursor-pointer"
+                title="Previous Page"
               >
                 <ChevronLeft className="w-4 h-4" />
               </button>
@@ -184,38 +293,41 @@ export default function AuditLogsPage() {
                   }
                 }}
                 disabled={!logs || logs.length < limit || isPlaceholderData}
-                className="btn-ghost p-1.5 rounded-lg border border-zinc-200 hover:bg-zinc-100 disabled:opacity-50 transition-all cursor-pointer"
+                className="p-2 rounded-xl border border-zinc-200 dark:border-zinc-700 bg-zinc-50 dark:bg-zinc-800 hover:bg-zinc-100 dark:hover:bg-zinc-700 text-zinc-700 dark:text-zinc-200 disabled:opacity-40 transition-all cursor-pointer"
+                title="Next Page"
               >
                 <ChevronRight className="w-4 h-4" />
               </button>
             </div>
           </div>
+
         </div>
+
       </div>
 
       {/* Clear Logs Confirmation Modal */}
       {showClearConfirm && (
-        <div className="modal-backdrop z-50">
-          <div className="modal-content max-w-sm border border-red-500/10 shadow-[0_12px_40px_rgba(239,68,68,0.12)]">
-            <div className="flex flex-col items-center text-center p-2 space-y-4">
-              <div className="w-12 h-12 rounded-2xl bg-rose-500/10 border border-rose-500/15 flex items-center justify-center text-rose-500 shadow-inner">
+        <div className="modal-backdrop z-[9999]">
+          <div className="modal-content max-w-sm overflow-hidden p-6 space-y-4">
+            <div className="flex flex-col items-center text-center space-y-3">
+              <div className="w-12 h-12 rounded-2xl bg-rose-500/10 border border-rose-500/20 flex items-center justify-center text-rose-500">
                 <Trash2 className="w-6 h-6" />
               </div>
-              <div>
-                <h3 className="text-sm font-bold text-zinc-900 uppercase tracking-wider">Confirm Clear Logs</h3>
-                <p className="text-xs text-slate-500 mt-2 leading-relaxed">
-                  Are you absolutely sure you want to clear all system audit logs?
-                </p>
-                <p className="text-[10.5px] text-rose-650 font-medium bg-rose-500/5 border border-rose-500/10 rounded-xl p-2.5 mt-3 leading-normal">
-                  Warning: All existing system activity and audit logs will be permanently cleared. This action cannot be undone.
+              <div className="space-y-1">
+                <h3 className="text-sm font-bold text-zinc-900 dark:text-zinc-100 uppercase tracking-wider">Confirm Clear Audit Logs</h3>
+                <p className="text-xs text-zinc-500 dark:text-zinc-400">
+                  Are you sure you want to permanently clear all security audit records?
                 </p>
               </div>
-              <div className="flex gap-2.5 w-full pt-2 border-t border-zinc-100">
+              <p className="text-[11px] text-rose-600 dark:text-rose-400 font-medium bg-rose-500/10 border border-rose-500/20 rounded-xl p-3 text-left w-full">
+                ⚠️ Warning: All existing historical telemetry logs will be deleted from the database. This action cannot be reversed.
+              </p>
+              <div className="flex gap-2 w-full pt-2 border-t border-zinc-100 dark:border-zinc-800">
                 <button 
                   type="button" 
                   onClick={() => setShowClearConfirm(false)} 
                   disabled={isDeleting}
-                  className="flex-1 btn-ghost h-9.5 text-[12px] rounded-xl cursor-pointer hover:bg-zinc-100 text-zinc-700 font-medium border border-zinc-200"
+                  className="flex-1 px-4 py-2.5 text-xs font-bold text-zinc-600 dark:text-zinc-300 hover:bg-zinc-100 dark:hover:bg-zinc-800 rounded-xl cursor-pointer border border-zinc-200 dark:border-zinc-700"
                 >
                   Cancel
                 </button>
@@ -223,19 +335,16 @@ export default function AuditLogsPage() {
                   type="button" 
                   onClick={handleClearLogs}
                   disabled={isDeleting}
-                  className="flex-1 bg-gradient-to-r from-red-650 to-rose-600 hover:opacity-90 active:scale-95 text-white font-bold text-[12px] rounded-xl cursor-pointer h-10 flex items-center justify-center gap-2 shadow-md shadow-rose-950/15 border border-rose-500/10 transition-all"
+                  className="flex-1 bg-rose-600 hover:bg-rose-700 text-white font-extrabold text-xs rounded-xl cursor-pointer py-2.5 flex items-center justify-center gap-2 shadow-xs transition-all"
                 >
-                  {isDeleting ? (
-                    <div className="w-3.5 h-3.5 border-2 border-white/30 border-t-white rounded-full animate-spin" />
-                  ) : (
-                    "Clear Logs"
-                  )}
+                  {isDeleting ? "Clearing..." : "Yes, Clear All Logs"}
                 </button>
               </div>
             </div>
           </div>
         </div>
       )}
+
     </SidebarLayout>
   );
 }

frontend/app/calendar/page.tsx

@@ -0,0 +1,482 @@
+"use client";
+
+import React, { useState, useEffect } from "react";
+import { useQuery } from "@tanstack/react-query";
+import SidebarLayout from "@/components/SidebarLayout";
+import { fetchApi, getUserProfile, getLocalDateString } from "@/app/utils/api";
+import { 
+  Calendar as CalendarIcon, 
+  MapPin, 
+  Clock, 
+  ShieldCheck, 
+  Compass, 
+  Info,
+  ChevronLeft,
+  ChevronRight,
+  UserCheck,
+  UserMinus,
+  LogIn,
+  LogOut,
+  Coffee,
+  CalendarDays,
+  Activity,
+  ArrowUpRight,
+  Calendar as CalendarGridIcon
+} from "lucide-react";
+
+interface Holiday {
+  id: number;
+  name: string;
+  date: string;
+  day: string;
+  type: "National" | "Gazetted" | "Restricted";
+  description: string;
+}
+
+const STATIC_HOLIDAYS: Holiday[] = [
+  { id: 1, name: "New Year's Day", date: "2026-01-01", day: "Thursday", type: "National", description: "First day of the new Gregorian calendar year." },
+  { id: 2, name: "Pongal / Makar Sankranti", date: "2026-01-14", day: "Wednesday", type: "Gazetted", description: "Harvest festival dedicated to the Sun God." },
+  { id: 3, name: "Republic Day", date: "2026-01-26", day: "Monday", type: "National", description: "Commemorates the enactment of the Constitution of India." },
+  { id: 4, name: "Maha Shivratri", date: "2026-02-15", day: "Sunday", type: "Restricted", description: "Hindu festival celebrated annually in honor of God Shiva." },
+  { id: 5, name: "Holi", date: "2026-03-03", day: "Tuesday", type: "Gazetted", description: "The festival of colors, celebrating the arrival of spring." },
+  { id: 6, name: "Eid al-Fitr", date: "2026-03-20", day: "Friday", type: "Gazetted", description: "Islamic holiday marking the end of Ramadan fast." },
+  { id: 7, name: "Ram Navami", date: "2026-03-28", day: "Saturday", type: "Restricted", description: "Celebrates the birth of Lord Rama." },
+  { id: 8, name: "Good Friday", date: "2026-04-03", day: "Friday", type: "Restricted", description: "Christian holiday commemorating the crucifixion of Jesus." },
+  { id: 9, name: "Ambedkar Jayanti", date: "2026-04-14", day: "Tuesday", type: "Gazetted", description: "Birth anniversary of Dr. B.R. Ambedkar, father of Indian constitution." },
+  { id: 10, name: "May Day / Labor Day", date: "2026-05-01", day: "Friday", type: "Gazetted", description: "Celebration of laborers and the working class." },
+  { id: 11, name: "Eid al-Adha", date: "2026-05-27", day: "Wednesday", type: "Gazetted", description: "Islamic feast of sacrifice." },
+  { id: 12, name: "Muharram", date: "2026-06-26", day: "Friday", type: "Gazetted", description: "Islamic New Year." },
+  { id: 13, name: "Independence Day", date: "2026-08-15", day: "Saturday", type: "National", description: "Marks the nation's independence from British rule." },
+  { id: 14, name: "Raksha Bandhan", date: "2026-08-27", day: "Thursday", type: "Restricted", description: "Celebrating the sacred bond between brothers and sisters." },
+  { id: 15, name: "Janmashtami", date: "2026-09-04", day: "Friday", type: "Restricted", description: "Celebrates the birth of Lord Krishna." },
+  { id: 16, name: "Gandhi Jayanti", date: "2026-10-02", day: "Friday", type: "National", description: "Birthday tribute to Mahatma Gandhi, Father of the Nation." },
+  { id: 17, name: "Dussehra", date: "2026-10-20", day: "Tuesday", type: "Gazetted", description: "Celebrating victory of Rama over Ravana / Good over Evil." },
+  { id: 18, name: "Diwali / Deepavali", date: "2026-11-09", day: "Monday", type: "Gazetted", description: "Festival of lights celebrating the victory of light over darkness." },
+  { id: 19, name: "Guru Nanak Jayanti", date: "2026-11-24", day: "Tuesday", type: "Gazetted", description: "Birth anniversary of Guru Nanak." },
+  { id: 20, name: "Christmas Day", date: "2026-12-25", day: "Friday", type: "Gazetted", description: "Annual celebration commemorating the birth of Jesus Christ." },
+];
+
+const WEEKDAYS = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+const MONTHS = [
+  "January", "February", "March", "April", "May", "June",
+  "July", "August", "September", "October", "November", "December"
+];
+
+export default function CalendarPage() {
+  const [profile, setProfile] = useState<any>(null);
+  const [currentDate, setCurrentDate] = useState(new Date()); // Default showing current system date
+  const [selectedDay, setSelectedDay] = useState<number | null>(new Date().getDate());
+
+  useEffect(() => {
+    setProfile(getUserProfile());
+  }, []);
+
+  const employee = profile?.employee;
+
+  // Fetch company geofence and policy rules
+  const { data: rules } = useQuery({
+    queryKey: ["attendance-policy-rules"],
+    queryFn: () => fetchApi("/policy/rules").catch(() => null),
+  });
+
+  // Fetch employee attendance history
+  const { data: history = [], isLoading: loadingHistory } = useQuery({
+    queryKey: ["employee-calendar-history", employee?.id],
+    queryFn: () => fetchApi(`/attendance/employee/${employee?.id}`),
+    enabled: !!employee?.id
+  });
+
+  const year = currentDate.getFullYear();
+  const month = currentDate.getMonth();
+
+  const daysInMonth = new Date(year, month + 1, 0).getDate();
+  const firstDayIndex = new Date(year, month, 1).getDay();
+
+  const nextMonth = () => {
+    setCurrentDate(new Date(year, month + 1, 1));
+    setSelectedDay(null);
+  };
+
+  const prevMonth = () => {
+    setCurrentDate(new Date(year, month - 1, 1));
+    setSelectedDay(null);
+  };
+
+  const getHolidayForDay = (dayNum: number): Holiday | undefined => {
+    const dateStr = `${year}-${String(month + 1).padStart(2, "0")}-${String(dayNum).padStart(2, "0")}`;
+    return STATIC_HOLIDAYS.find((h) => h.date === dateStr);
+  };
+
+  const getAttendanceForDay = (dayNum: number) => {
+    const dateStr = `${year}-${String(month + 1).padStart(2, "0")}-${String(dayNum).padStart(2, "0")}`;
+    return history.find((h: any) => h.date === dateStr);
+  };
+
+  // Determine cell state for coloring
+  const getDayState = (dayNum: number) => {
+    const holiday = getHolidayForDay(dayNum);
+    if (holiday) return { type: "holiday", label: holiday.name, holiday };
+
+    const att = getAttendanceForDay(dayNum);
+    if (att) {
+      if (["Present", "WFH"].includes(att.status)) return { type: "present", record: att };
+      if (att.status === "Late") return { type: "late", record: att };
+      if (att.status === "Absent") return { type: "absent", record: att };
+      if (att.status === "On Leave") return { type: "leave", record: att };
+    }
+
+    // No record exists
+    const cellDate = new Date(year, month, dayNum);
+    const today = new Date();
+    today.setHours(0,0,0,0);
+    
+    if (cellDate > today) {
+      return { type: "future" };
+    }
+
+    const dayOfWeek = cellDate.getDay();
+    const isWeekend = dayOfWeek === 0 || dayOfWeek === 6;
+    if (isWeekend) {
+      return { type: "weekend" };
+    }
+
+    return { type: "absent" };
+  };
+
+  const daysArray = [];
+  for (let i = 0; i < firstDayIndex; i++) {
+    daysArray.push(null);
+  }
+  for (let d = 1; d <= daysInMonth; d++) {
+    daysArray.push(d);
+  }
+
+  const selectedDayState = selectedDay ? getDayState(selectedDay) : null;
+  const selectedHoliday = selectedDayState?.holiday || null;
+  const selectedRecord = selectedDayState?.record || null;
+
+  const activeMonthHolidays = STATIC_HOLIDAYS.filter((h) => {
+    const hDate = new Date(h.date);
+    return hDate.getMonth() === month && hDate.getFullYear() === year;
+  });
+
+  return (
+    <SidebarLayout>
+      <div className="space-y-6 max-w-6xl mx-auto text-slate-800 dark:text-zinc-100 font-sans">
+        
+        {/* Header Block */}
+        <div className="pb-4 border-b border-zinc-200 dark:border-zinc-800 flex flex-col sm:flex-row sm:items-center justify-between gap-4">
+          <div>
+            <h1 className="text-2xl font-black text-slate-900 dark:text-zinc-100 tracking-tight flex items-center gap-2.5">
+              <div className="p-2 rounded-xl bg-zinc-100 dark:bg-zinc-800/80 text-zinc-700 dark:text-zinc-300 border border-zinc-200 dark:border-zinc-700/60 shadow-2xs">
+                <CalendarIcon className="w-5.5 h-5.5 text-cyan-500" />
+              </div>
+              Calendar & Info Hub
+            </h1>
+            <p className="text-xs text-slate-400 dark:text-zinc-400 mt-1.5">
+              Tracks shift punches, holidays, and weekly-offs. Click on dates to view full check-in analytics.
+            </p>
+          </div>
+        </div>
+
+        {/* Content Layout */}
+        <div className="grid grid-cols-1 lg:grid-cols-12 gap-6">
+          
+          {/* Calendar Card (Sleek Modern Layout) */}
+          <div className="lg:col-span-7 space-y-5">
+            <div className="bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800 rounded-2xl p-5 shadow-[0_8px_30px_rgb(0,0,0,0.04)] dark:shadow-[0_8px_30px_rgb(0,0,0,0.25)] transition-all">
+              
+              {/* Month Selector Header */}
+              <div className="flex items-center justify-between border-b border-slate-100 dark:border-zinc-800 pb-4 mb-4">
+                <div className="flex items-center gap-3">
+                  <h3 className="text-base font-black text-slate-950 dark:text-zinc-200 uppercase font-mono tracking-wider">
+                    {MONTHS[month]} {year}
+                  </h3>
+                  <div className="flex items-center bg-zinc-100 dark:bg-zinc-800 rounded-xl p-0.5 border border-zinc-200 dark:border-zinc-700/60">
+                    <button onClick={prevMonth} className="p-1.5 hover:bg-white dark:hover:bg-zinc-700 rounded-lg text-slate-500 dark:text-zinc-450 cursor-pointer active:scale-95 transition-all">
+                      <ChevronLeft className="w-4 h-4" />
+                    </button>
+                    <button onClick={nextMonth} className="p-1.5 hover:bg-white dark:hover:bg-zinc-700 rounded-lg text-slate-500 dark:text-zinc-455 cursor-pointer active:scale-95 transition-all">
+                      <ChevronRight className="w-4 h-4" />
+                    </button>
+                  </div>
+                </div>
+                
+                <span className="flex items-center gap-1.5 text-[9px] font-bold text-cyan-600 dark:text-cyan-400 font-mono bg-cyan-50 dark:bg-cyan-950/30 px-2.5 py-0.5 rounded-lg border border-cyan-150 dark:border-cyan-900/30 uppercase tracking-wider">
+                  <Activity className="w-3 h-3 text-cyan-500 animate-pulse" />
+                  Live Sync Active
+                </span>
+              </div>
+
+              {/* Weekdays Row wrapper with custom background pill */}
+              <div className="grid grid-cols-7 gap-1.5 text-center font-bold text-[10px] font-mono text-zinc-450 dark:text-zinc-550 uppercase mb-3 bg-zinc-50 dark:bg-zinc-950/40 py-2 px-1.5 rounded-xl border border-zinc-200/40 dark:border-zinc-850/50">
+                {WEEKDAYS.map((day) => (
+                  <div key={day} className="py-0.5 tracking-wider">{day.slice(0, 3)}</div>
+                ))}
+              </div>
+
+              {/* Calendar Days grid */}
+              <div className="grid grid-cols-7 gap-2">
+                {daysArray.map((day, idx) => {
+                  if (day === null) {
+                    return <div key={`empty-${idx}`} className="aspect-square bg-slate-50/10 dark:bg-zinc-950/5 rounded-xl border border-dashed border-zinc-150/20 dark:border-zinc-900/30" />;
+                  }
+
+                  const state = getDayState(day);
+                  const isSelected = selectedDay === day;
+
+                  // High-fidelity cell styling based on attendance status
+                  let cellStyle = "bg-white dark:bg-zinc-900 text-slate-800 dark:text-zinc-250 border-slate-200 dark:border-zinc-800 shadow-2xs hover:shadow-sm hover:translate-y-[-1px] active:translate-y-[1px]";
+                  let dotStyle = "";
+
+                  if (state.type === "present") {
+                    cellStyle = "bg-emerald-500/10 text-emerald-800 dark:text-emerald-400 border-emerald-500/35 hover:bg-emerald-500/20 shadow-xs border-b-[3px] border-b-emerald-500";
+                    dotStyle = "bg-emerald-500";
+                  } else if (state.type === "late") {
+                    cellStyle = "bg-amber-500/10 text-amber-800 dark:text-amber-400 border-amber-500/35 hover:bg-amber-500/20 shadow-xs border-b-[3px] border-b-amber-500";
+                    dotStyle = "bg-amber-500";
+                  } else if (state.type === "absent") {
+                    cellStyle = "bg-rose-500/10 text-rose-800 dark:text-rose-400 border-rose-500/35 hover:bg-rose-500/20 shadow-xs border-b-[3px] border-b-rose-500";
+                    dotStyle = "bg-rose-500";
+                  } else if (state.type === "holiday") {
+                    cellStyle = "bg-cyan-500/10 text-cyan-800 dark:text-cyan-400 border-cyan-500/35 hover:bg-cyan-500/20 shadow-xs border-b-[3px] border-b-cyan-500";
+                    dotStyle = "bg-cyan-500";
+                  } else if (state.type === "leave") {
+                    cellStyle = "bg-indigo-500/10 text-indigo-800 dark:text-indigo-400 border-indigo-500/35 hover:bg-indigo-500/20 shadow-xs border-b-[3px] border-b-indigo-500";
+                    dotStyle = "bg-indigo-500";
+                  } else if (state.type === "weekend") {
+                    cellStyle = "bg-zinc-50 dark:bg-zinc-950/20 text-slate-400 dark:text-zinc-500 border-zinc-200/50 dark:border-zinc-850 hover:bg-zinc-100/40 border-b-[3px] border-b-zinc-300 dark:border-b-zinc-700";
+                  }
+
+                  if (isSelected) {
+                    cellStyle += " ring-2 ring-cyan-500 dark:ring-cyan-400 border-cyan-500 shadow-md translate-y-[-1px]";
+                  }
+
+                  return (
+                    <button
+                      key={`day-${day}`}
+                      onClick={() => setSelectedDay(day)}
+                      className={`aspect-square rounded-xl border flex flex-col justify-between p-2.5 transition-all text-left cursor-pointer ${cellStyle}`}
+                    >
+                      <span className="text-xs font-black leading-none">{day}</span>
+                      {dotStyle && (
+                        <span className={`w-1.5 h-1.5 rounded-full ${dotStyle} self-end mt-auto`} />
+                      )}
+                    </button>
+                  );
+                })}
+              </div>
+
+              {/* Legend indicator */}
+              <div className="mt-5 pt-4 border-t border-slate-100 dark:border-zinc-800 flex flex-wrap gap-4 text-[9px] font-bold text-slate-500 dark:text-zinc-400 uppercase tracking-widest justify-center">
+                <div className="flex items-center gap-1.5">
+                  <span className="w-2 h-2 rounded-full bg-emerald-500" />
+                  <span>Present</span>
+                </div>
+                <div className="flex items-center gap-1.5">
+                  <span className="w-2 h-2 rounded-full bg-amber-500" />
+                  <span>Late</span>
+                </div>
+                <div className="flex items-center gap-1.5">
+                  <span className="w-2 h-2 rounded-full bg-rose-500" />
+                  <span>Absent</span>
+                </div>
+                <div className="flex items-center gap-1.5">
+                  <span className="w-2 h-2 rounded-full bg-cyan-500" />
+                  <span>Holiday</span>
+                </div>
+                <div className="flex items-center gap-1.5">
+                  <span className="w-2 h-2 rounded-full bg-indigo-500" />
+                  <span>Leave</span>
+                </div>
+              </div>
+
+            </div>
+
+            {/* Holidays of the Month list */}
+            <div className="bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800 rounded-2xl p-5 shadow-2xs space-y-4">
+              <div className="flex items-center justify-between border-b border-slate-100 dark:border-zinc-800 pb-3">
+                <div className="flex items-center gap-2">
+                  <CalendarDays className="w-4.5 h-4.5 text-cyan-500 animate-pulse" />
+                  <h3 className="text-xs font-bold text-slate-950 dark:text-zinc-200 uppercase tracking-wider font-mono">
+                    Holidays in {MONTHS[month]}
+                  </h3>
+                </div>
+                <span className="text-[9px] font-mono font-bold px-2 py-0.5 bg-cyan-50 dark:bg-cyan-950/40 text-cyan-600 dark:text-cyan-400 border border-cyan-100 dark:border-cyan-900/30 rounded">
+                  {activeMonthHolidays.length} Holidays
+                </span>
+              </div>
+
+              <div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
+                {activeMonthHolidays.length > 0 ? (
+                  activeMonthHolidays.map((holiday) => {
+                    const hDay = new Date(holiday.date).getDate();
+                    const isHolidaySelected = selectedDay === hDay;
+                    return (
+                      <button
+                        key={holiday.id}
+                        onClick={() => setSelectedDay(hDay)}
+                        className={`text-left p-3 rounded-xl border transition-all flex items-center justify-between gap-3 cursor-pointer group bg-zinc-50/50 dark:bg-zinc-950/20 ${
+                          isHolidaySelected 
+                            ? "border-cyan-500 bg-cyan-500/5 ring-1 ring-cyan-500/20" 
+                            : "border-zinc-150 dark:border-zinc-850 hover:border-cyan-300 dark:hover:border-cyan-800"
+                        }`}
+                      >
+                        <div className="min-w-0">
+                          <p className="text-[11px] font-bold text-slate-800 dark:text-zinc-200 truncate group-hover:text-cyan-600 dark:group-hover:text-cyan-400">{holiday.name}</p>
+                          <p className="text-[9px] text-slate-400 dark:text-zinc-500 font-mono mt-0.5">{holiday.date} &bull; {holiday.day}</p>
+                        </div>
+                        <span className={`w-2 h-2 rounded-full shrink-0 ${
+                          holiday.type === "National" ? "bg-rose-500 shadow-[0_0_6px_rgba(239,68,68,0.4)]" :
+                          holiday.type === "Gazetted" ? "bg-emerald-500 shadow-[0_0_6px_rgba(16,185,129,0.4)]" :
+                          "bg-amber-500 shadow-[0_0_6px_rgba(245,158,11,0.4)]"
+                        }`} />
+                      </button>
+                    );
+                  })
+                ) : (
+                  <p className="text-[10px] text-slate-450 dark:text-zinc-500 text-center py-6 italic font-mono col-span-2">No holidays scheduled this month.</p>
+                )}
+              </div>
+            </div>
+
+          </div>
+
+          {/* Activity Logs of Selected Day (Greathr Detail Sidebar Panel) */}
+          <div className="lg:col-span-5 space-y-6">
+            {selectedDay ? (
+              <div className="tech-card-3d bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800 p-5 flex flex-col justify-between min-h-[400px]">
+                
+                <div className="space-y-5">
+                  {/* Selected Day Info Header */}
+                  <div className="flex items-center justify-between border-b border-slate-100 dark:border-zinc-800 pb-3">
+                    <div>
+                      <h3 className="text-xs font-bold text-slate-900 dark:text-zinc-200 uppercase tracking-wider font-mono">
+                        Date Details & Activity
+                      </h3>
+                      <p className="text-[10px] text-slate-400 dark:text-zinc-500 mt-1 font-semibold">
+                        {new Date(year, month, selectedDay).toLocaleDateString([], { weekday: 'long', year: 'numeric', month: 'long', day: 'numeric' })}
+                      </p>
+                    </div>
+                    
+                    {/* Status Pill */}
+                    <span className={`text-[9px] font-mono font-bold uppercase px-2.5 py-0.5 rounded-lg border ${
+                      selectedDayState?.type === "present" ? "bg-emerald-50 border-emerald-200 text-emerald-700 dark:bg-emerald-950/20 dark:text-emerald-400" :
+                      selectedDayState?.type === "late" ? "bg-amber-50 border-amber-200 text-amber-700 dark:bg-amber-950/20 dark:text-amber-400" :
+                      selectedDayState?.type === "absent" ? "bg-rose-50 border-rose-200 text-rose-700 dark:bg-rose-950/20 dark:text-rose-455" :
+                      selectedDayState?.type === "holiday" ? "bg-cyan-50 border-cyan-200 text-cyan-700 dark:bg-cyan-950/20 dark:text-cyan-400" :
+                      selectedDayState?.type === "leave" ? "bg-indigo-50 border-indigo-200 text-indigo-700 dark:bg-indigo-950/20 dark:text-indigo-400" :
+                      selectedDayState?.type === "weekend" ? "bg-zinc-50 border-zinc-200 text-zinc-500 dark:bg-zinc-800 dark:border-zinc-700 dark:text-zinc-405" :
+                      "bg-slate-50 border-slate-200 text-slate-400"
+                    }`}>
+                      {selectedDayState?.type}
+                    </span>
+                  </div>
+
+                  {/* Activity Details Display */}
+                  <div className="space-y-4 text-xs">
+                    {selectedHoliday && (
+                      <div className="p-4 bg-cyan-500/5 dark:bg-cyan-950/10 border border-cyan-100 dark:border-cyan-900/60 rounded-xl space-y-1.5">
+                        <p className="font-extrabold text-cyan-700 dark:text-cyan-400 flex items-center gap-1.5 uppercase text-[10px] tracking-wider">
+                          <Coffee className="w-3.5 h-3.5" />
+                          Official Holiday: {selectedHoliday.name}
+                        </p>
+                        <p className="text-[10px] text-slate-500 dark:text-zinc-400 leading-normal font-medium">{selectedHoliday.description}</p>
+                        <span className="inline-block text-[8px] font-mono font-semibold px-2 py-0.5 bg-cyan-100/50 dark:bg-cyan-900/30 text-cyan-600 dark:text-cyan-400 rounded">
+                          {selectedHoliday.type} Category
+                        </span>
+                      </div>
+                    )}
+
+                    {selectedRecord && (
+                      <div className="grid grid-cols-2 gap-3">
+                        <div className="p-3 rounded-xl bg-zinc-50/50 dark:bg-zinc-950/30 border border-zinc-150/60 dark:border-zinc-850/80 flex items-center gap-3">
+                          <LogIn className="w-4 h-4 text-emerald-500 shrink-0" />
+                          <div className="min-w-0">
+                            <p className="text-[9px] font-bold text-zinc-400 dark:text-zinc-500 uppercase font-mono tracking-wider leading-none">Punch In</p>
+                            <p className="font-extrabold text-slate-850 dark:text-zinc-200 mt-1 font-mono text-[13px]">
+                              {selectedRecord.check_in ? new Date(selectedRecord.check_in).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) : "—"}
+                            </p>
+                          </div>
+                        </div>
+
+                        <div className="p-3 rounded-xl bg-zinc-50/50 dark:bg-zinc-950/30 border border-zinc-150/60 dark:border-zinc-850/80 flex items-center gap-3">
+                          <LogOut className="w-4 h-4 text-rose-500 shrink-0" />
+                          <div className="min-w-0">
+                            <p className="text-[9px] font-bold text-zinc-400 dark:text-zinc-500 uppercase font-mono tracking-wider leading-none">Punch Out</p>
+                            <p className="font-extrabold text-slate-850 dark:text-zinc-200 mt-1 font-mono text-[13px]">
+                              {selectedRecord.check_out ? new Date(selectedRecord.check_out).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }) : "—"}
+                            </p>
+                          </div>
+                        </div>
+
+                        <div className="p-3 rounded-xl bg-zinc-50/50 dark:bg-zinc-950/30 border border-zinc-150/60 dark:border-zinc-850/80 flex items-center gap-3">
+                          <Clock className="w-4 h-4 text-cyan-500 shrink-0" />
+                          <div className="min-w-0">
+                            <p className="text-[9px] font-bold text-zinc-400 dark:text-zinc-500 uppercase font-mono tracking-wider leading-none">Worked Hours</p>
+                            <p className="font-extrabold text-slate-850 dark:text-zinc-200 mt-1 font-mono text-[13px]">
+                              {(selectedRecord.working_hours || 0).toFixed(1)} hrs
+                            </p>
+                          </div>
+                        </div>
+
+                        <div className="p-3 rounded-xl bg-zinc-50/50 dark:bg-zinc-950/30 border border-zinc-150/60 dark:border-zinc-850/80 flex items-center gap-3">
+                          <MapPin className="w-4 h-4 text-indigo-500 shrink-0" />
+                          <div className="min-w-0">
+                            <p className="text-[9px] font-bold text-zinc-400 dark:text-zinc-500 uppercase font-mono tracking-wider leading-none">GPS Geofence</p>
+                            <p className="font-extrabold text-slate-855 dark:text-zinc-200 mt-1 text-[11px] truncate" title={selectedRecord.geofence_result || "Verified"}>
+                              {selectedRecord.geofence_result || "Verified Match"}
+                            </p>
+                          </div>
+                        </div>
+                      </div>
+                    )}
+
+                    {!selectedHoliday && !selectedRecord && (
+                      <div className="p-6 text-center border border-dashed border-zinc-200 dark:border-zinc-800 rounded-xl text-zinc-400 dark:text-zinc-500 space-y-2.5 bg-zinc-50/20 dark:bg-zinc-950/10">
+                        {selectedDayState?.type === "weekend" ? (
+                          <>
+                            <Coffee className="w-8 h-8 mx-auto text-zinc-400 opacity-40 animate-bounce" />
+                            <p className="font-bold text-slate-700 dark:text-zinc-300">Weekly Off (Weekend)</p>
+                            <p className="text-[10px] text-zinc-400 leading-relaxed">No shift checks are required on Saturdays and Sundays.</p>
+                          </>
+                        ) : selectedDayState?.type === "future" ? (
+                          <>
+                            <Clock className="w-8 h-8 mx-auto text-zinc-400 opacity-40" />
+                            <p className="font-bold text-slate-700 dark:text-zinc-300">Scheduled Workday</p>
+                            <p className="text-[10px] text-zinc-400 leading-relaxed">Shift starts at 09:00 AM. Biometric registration will open on date arrival.</p>
+                          </>
+                        ) : (
+                          <>
+                            <UserMinus className="w-8 h-8 mx-auto text-rose-500 opacity-40 animate-pulse" />
+                            <p className="font-bold text-rose-700 dark:text-rose-455">Absent (No punch records found)</p>
+                            <p className="text-[10px] text-zinc-400 leading-relaxed">No logs detected. Contact HR if you require a retrospective override.</p>
+                          </>
+                        )}
+                      </div>
+                    )}
+                  </div>
+                </div>
+
+                {/* Policy settings details footer */}
+                <div className="pt-3 border-t border-slate-100 dark:border-zinc-800 text-[10px] text-slate-500 dark:text-zinc-400 leading-normal flex items-start gap-2 bg-slate-50/50 dark:bg-zinc-950/20 p-2.5 rounded-xl font-medium mt-4">
+                  <Info className="w-4 h-4 text-cyan-500 shrink-0" />
+                  <span>
+                    Shift timings are structured <strong>09:00 AM - 05:00 PM</strong> with a 15-minute grace period. Punch logs are cross-referenced with your active office geofence.
+                  </span>
+                </div>
+
+              </div>
+            ) : (
+              <div className="tech-card-3d bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800 p-6 text-center text-zinc-450 dark:text-zinc-400 text-xs italic font-medium">
+                Click on any calendar day to inspect punch records.
+              </div>
+            )}
+          </div>
+
+        </div>
+
+      </div>
+    </SidebarLayout>
+  );
+}

frontend/app/employees/[id]/page.tsx

@@ -1167,16 +1167,8 @@ export default function EmployeeDetailPage() {
                 </div>
 
                 {/* Footer QR fallback */}
-                <div className="bg-slate-50/80 border-t border-slate-100 h-[100px] flex items-center justify-between px-5 pb-2 shrink-0 z-10">
-                  <div className="flex flex-col min-w-0 pr-1.5">
-                    <span className="text-[7.5px] font-black text-slate-900 tracking-wider uppercase font-mono">
-                      SCAN TO VERIFY
-                    </span>
-                    <p className="text-[6.5px] text-slate-450 font-medium leading-snug mt-0.5 max-w-[115px] font-mono">
-                      Scan this backup barcode QR badge if Kiosk face matching fails.
-                    </p>
-                  </div>
-                  <div className="w-[64px] h-[64px] bg-white rounded-lg border border-slate-200/80 p-1 flex items-center justify-center shadow-2xs shrink-0">
+                <div className="bg-slate-50/80 border-t border-slate-100 h-[90px] flex items-center justify-center pb-1 shrink-0 z-10">
+                  <div className="w-[60px] h-[60px] bg-white rounded-lg border border-slate-200/80 p-1 flex items-center justify-center shadow-2xs shrink-0">
                     <img 
                       src={`https://api.qrserver.com/v1/create-qr-code/?size=80x80&data=${employee.employee_id}`}
                       alt="QR"

frontend/app/employees/page.tsx

@@ -7,7 +7,8 @@ import { fetchApi, getBackendUrl, parseDateTime, getLocalDateString } from "@/ap
 import { 
   Plus, Search, Trash2, Camera, Upload, FileSpreadsheet,
   X, Users, CheckCircle2, XCircle, ChevronDown, UserCheck, ShieldAlert,
-  Download, Mail, Phone, Calendar, Briefcase, Clock, TrendingUp, MapPin
+  Download, Mail, Phone, Calendar, Briefcase, Clock, TrendingUp, MapPin,
+  Eye, EyeOff
 } from "lucide-react";
 import { useToast } from "@/app/utils/toast";
 import Link from "next/link";
@@ -69,6 +70,7 @@ export default function EmployeesPage() {
   const router = useRouter();
   const { toast } = useToast();
   const [search, setSearch] = useState("");
+  const [selectedIds, setSelectedIds] = useState<number[]>([]);
   const [deptFilter, setDeptFilter] = useState("");
   const [statusFilter, setStatusFilter] = useState("");
   const [showAddDialog, setShowAddDialog] = useState(false);
@@ -92,6 +94,7 @@ export default function EmployeesPage() {
   const [deptId, setDeptId] = useState("");
   const [createUserLogin, setCreateUserLogin] = useState(false);
   const [password, setPassword] = useState("");
+  const [showPassword, setShowPassword] = useState(false);
   const [allowWfh, setAllowWfh] = useState(false);
   const [wfhAddress, setWfhAddress] = useState("");
   const [wfhLat, setWfhLat] = useState<number | null>(null);
@@ -139,6 +142,19 @@ export default function EmployeesPage() {
     onError: (err: any) => toast.error(err.message || "Failed to delete employee.")
   });
 
+  const approveMutation = useMutation({
+    mutationFn: (id: number) => fetchApi(`/employees/${id}`, {
+      method: "PUT",
+      body: JSON.stringify({ status: "Active" })
+    }),
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: ["employees"] });
+      queryClient.invalidateQueries({ queryKey: ["dashboard-summary"] });
+      toast.success("Employee approved successfully!");
+    },
+    onError: (err: any) => toast.error(err.message || "Failed to approve employee.")
+  });
+
   const resetForm = () => {
     setEmpId(""); setName(""); setEmail(""); setPhone(""); setDesignation("");
     setJoiningDate(getLocalDateString()); setStatusVal("Active");
@@ -221,9 +237,9 @@ export default function EmployeesPage() {
         body: formData 
       });
       queryClient.invalidateQueries({ queryKey: ["employees"] });
-      showToast.success("Profile photo uploaded successfully!");
+      toast.success("Profile photo uploaded successfully!");
     } catch (err: any) {
-      showToast.error(err.message || "Failed to upload photo");
+      toast.error(err.message || "Failed to upload photo");
     }
   };
 
@@ -300,6 +316,23 @@ export default function EmployeesPage() {
             <h1 className="text-xl font-bold text-[var(--text-primary)] tracking-tight">Staff Management</h1>
           </div>
           <div className="flex items-center gap-2.5 shrink-0">
+            {employees?.some((emp: any) => selectedIds.includes(emp.id) && emp.status === "Pending Approval") && (
+              <button
+                onClick={async () => {
+                  const pendingSelected = employees.filter((emp: any) => selectedIds.includes(emp.id) && emp.status === "Pending Approval");
+                  for (const emp of pendingSelected) {
+                    await approveMutation.mutateAsync(emp.id);
+                  }
+                  setSelectedIds([]);
+                  toast.success(`Approved ${pendingSelected.length} employee accounts.`);
+                }}
+                disabled={approveMutation.isPending}
+                className="btn-primary bg-emerald-600 hover:bg-emerald-700 text-white border-transparent text-[12px] h-9.5 px-4 flex items-center gap-2 rounded-xl cursor-pointer"
+              >
+                <UserCheck className="w-3.5 h-3.5" />
+                Approve Selected ({employees.filter((emp: any) => selectedIds.includes(emp.id) && emp.status === "Pending Approval").length})
+              </button>
+            )}
             <button
               onClick={() => setShowImportDialog(true)}
               className="btn-ghost text-[12px] h-9.5 px-4 flex items-center gap-2 rounded-xl cursor-pointer hover:bg-white/[0.04]"
@@ -351,23 +384,38 @@ export default function EmployeesPage() {
               <option value="">All Statuses</option>
               <option value="Active">Active</option>
               <option value="Inactive">Inactive</option>
+              <option value="Pending Approval">Pending Approval</option>
             </select>
             <ChevronDown className="absolute right-3 top-1/2 -translate-y-1/2 w-4 h-4 text-slate-500 pointer-events-none" />
           </div>
         </div>
 
         {/* Table List Card */}
-        <div className="glass-card rounded-2xl border border-white/6 overflow-hidden">
-          <div className="px-5 py-3.5 border-b border-white/5 bg-white/[0.005] flex items-center justify-between">
+        <div className="tech-card-3d-minimal bg-white overflow-hidden">
+          <div className="px-5 py-3.5 border-b border-slate-200/80 dark:border-zinc-800 bg-slate-50/50 dark:bg-zinc-900/50 flex items-center justify-between">
             <p className="text-[11px] text-slate-500 font-mono">
               {loadingEmployees ? "Fetching..." : `${employees?.length || 0} registered personnel`}
             </p>
           </div>
           
-          <div className="overflow-x-auto">
+          <div className="overflow-x-auto min-h-[350px]">
             <table className="data-table">
               <thead>
                 <tr>
+                  <th className="py-3.5 px-4 w-[40px] text-center">
+                    <input
+                      type="checkbox"
+                      checked={employees?.length > 0 && selectedIds.length === employees.length}
+                      onChange={(e) => {
+                        if (e.target.checked) {
+                          setSelectedIds(employees.map((emp: any) => emp.id));
+                        } else {
+                          setSelectedIds([]);
+                        }
+                      }}
+                      className="w-4 h-4 rounded border-slate-300 text-slate-900 focus:ring-slate-900 cursor-pointer"
+                    />
+                  </th>
                   <th className="text-left py-3.5 px-5">Employee Info</th>
                   <th className="text-left py-3.5 px-5">Department</th>
                   <th className="text-left py-3.5 px-5">Designation</th>
@@ -379,7 +427,7 @@ export default function EmployeesPage() {
                 {loadingEmployees ? (
                   Array.from({ length: 5 }).map((_, i) => (
                     <tr key={i}>
-                      {Array.from({ length: 5 }).map((_, j) => (
+                      {Array.from({ length: 6 }).map((_, j) => (
                         <td key={j} className="py-4.5 px-5">
                           <div className="skeleton h-4 w-28" />
                         </td>
@@ -388,7 +436,7 @@ export default function EmployeesPage() {
                   ))
                 ) : employees?.length === 0 ? (
                   <tr>
-                    <td colSpan={5} className="py-20 text-center">
+                    <td colSpan={6} className="py-20 text-center">
                       <div className="flex flex-col items-center gap-3 max-w-xs mx-auto">
                         <div className="w-12 h-12 rounded-2xl bg-white/4 flex items-center justify-center">
                           <Users className="w-5 h-5 text-slate-600" />
@@ -403,6 +451,20 @@ export default function EmployeesPage() {
                     const avatarColor = avatarColors[emp.id % avatarColors.length];
                     return (
                       <tr key={emp.id} className="group/row cursor-pointer hover:bg-white/[0.015]" onClick={() => router.push(`/employees/${emp.id}`)}>
+                        <td className="py-3.5 px-4 text-center" onClick={(e) => e.stopPropagation()}>
+                          <input
+                            type="checkbox"
+                            checked={selectedIds.includes(emp.id)}
+                            onChange={(e) => {
+                              if (e.target.checked) {
+                                setSelectedIds(prev => [...prev, emp.id]);
+                              } else {
+                                setSelectedIds(prev => prev.filter(id => id !== emp.id));
+                              }
+                            }}
+                            className="w-4 h-4 rounded border-slate-300 text-slate-900 focus:ring-slate-900 cursor-pointer"
+                          />
+                        </td>
                         <td className="py-3.5 px-5">
                           <div className="flex items-center gap-3">
                             <EmployeeAvatar emp={emp} size="md" />
@@ -421,14 +483,33 @@ export default function EmployeesPage() {
                           {emp.designation || <span className="text-slate-400">—</span>}
                         </td>
                         <td className="py-3.5 px-5">
-                          <span className={`badge ${emp.status === "Active" ? "badge-emerald" : "badge-slate"} flex items-center gap-1 w-fit`}>
-                            {emp.status === "Active" && <span className="w-1.5 h-1.5 rounded-full bg-emerald-400 animate-pulse" />}
-                            {emp.status}
-                          </span>
+                          {emp.status === "Pending Approval" ? (
+                            <span className="flex items-center gap-1.5 px-2 py-0.5 rounded-lg text-[10.5px] font-bold bg-amber-500/10 border border-amber-500/25 text-amber-500 w-fit">
+                              <span className="w-1.5 h-1.5 rounded-full bg-amber-500 animate-pulse" />
+                              Pending Approval
+                            </span>
+                          ) : (
+                            <span className={`badge ${emp.status === "Active" ? "badge-emerald" : "badge-slate"} flex items-center gap-1 w-fit`}>
+                              {emp.status === "Active" && <span className="w-1.5 h-1.5 rounded-full bg-emerald-400 animate-pulse" />}
+                              {emp.status}
+                            </span>
+                          )}
                         </td>
                         <td className="py-3.5 px-5" onClick={(e) => e.stopPropagation()}>
                           <div className="flex items-center justify-center gap-2">
-                            {emp.images && emp.images.length > 0 ? (
+                            {emp.status === "Pending Approval" ? (
+                              <button
+                                onClick={(e) => {
+                                  e.stopPropagation();
+                                  approveMutation.mutate(emp.id);
+                                }}
+                                disabled={approveMutation.isPending}
+                                className="flex items-center gap-1.5 px-2.5 py-1.5 rounded-xl text-[10.5px] font-bold text-emerald-500 bg-emerald-500/8 hover:bg-emerald-500/15 border border-emerald-500/15 hover:border-emerald-500/25 transition-all cursor-pointer"
+                              >
+                                <UserCheck className="w-3.5 h-3.5 animate-pulse" />
+                                Approve Account
+                              </button>
+                            ) : emp.images && emp.images.length > 0 ? (
                               <Link
                                 href={`/enroll/${emp.id}`}
                                 className="flex items-center gap-1.5 px-2.5 py-1.5 rounded-xl text-[10.5px] font-bold text-emerald-500 bg-emerald-500/8 hover:bg-emerald-500/15 border border-emerald-500/15 hover:border-emerald-500/25 transition-all"
@@ -602,8 +683,24 @@ export default function EmployeesPage() {
                 </label>
                 {createUserLogin && (
                   <InputField label="Initial Password" required>
-                    <input type="password" required placeholder="Minimum 8 characters" value={password}
-                      onChange={(e) => setPassword(e.target.value)} className={inputCls} />
+                    <div className="relative">
+                      <input 
+                        type={showPassword ? "text" : "password"} 
+                        required 
+                        placeholder="Minimum 8 characters" 
+                        value={password}
+                        onChange={(e) => setPassword(e.target.value)} 
+                        className={`${inputCls} pr-10`} 
+                      />
+                      <button
+                        type="button"
+                        onClick={() => setShowPassword(!showPassword)}
+                        className="absolute right-3 top-1/2 -translate-y-1/2 text-slate-400 hover:text-slate-700 dark:hover:text-zinc-200 cursor-pointer"
+                        title={showPassword ? "Hide password" : "Show password"}
+                      >
+                        {showPassword ? <EyeOff className="w-4 h-4" /> : <Eye className="w-4 h-4" />}
+                      </button>
+                    </div>
                   </InputField>
                 )}
               </div>

frontend/app/enroll/[id]/page.tsx

@@ -278,6 +278,22 @@ export default function EnrollPage() {
     }
   });
 
+  const deletePoseMutation = useMutation({
+    mutationFn: (pose: string) => fetchApi(`/enrollment/${employeeId}/pose/${pose}`, { method: "DELETE" }),
+    onSuccess: (_, pose) => {
+      refetchStatus();
+      setCapturedImages(prev => {
+        const next = { ...prev };
+        delete next[pose];
+        return next;
+      });
+      toast.success(`Face profile for pose '${POSES[pose]?.label || pose}' cleared.`);
+    },
+    onError: (err: any) => {
+      toast.error(err.message || "Failed to delete pose");
+    }
+  });
+
   // Offline Web Audio API Sound Generator (synthesized camera click & alert beeps)
   const playSound = (type: "beep" | "click") => {
     if (typeof window === "undefined") return;
@@ -993,39 +1009,49 @@ export default function EnrollPage() {
             
             {/* Left Box: Progress and instructions */}
             <div className="space-y-5">
-              <div className="bg-white border border-slate-200 rounded-2xl p-5 shadow-sm space-y-4">
-                <h3 className="text-[13px] font-bold text-slate-900 uppercase tracking-wider">Facial Registry</h3>
+              <div className="tech-card-3d-minimal bg-white p-5 space-y-4">
+                <h3 className="text-[11px] font-black text-slate-800 uppercase tracking-wider">Facial Registry</h3>
                 
-                <div className="space-y-1">
-                  <div className="flex items-center justify-between text-xs font-mono font-bold text-slate-650">
+                <div className="space-y-3.5">
+                  <div className="flex items-center justify-between text-xs font-mono font-bold text-slate-600">
                     <span>Database Status:</span>
-                    <span className={isProfileComplete ? "text-emerald-600" : "text-amber-500"}>
+                    <span className={`inline-flex items-center gap-1.5 ${isProfileComplete ? "text-emerald-600" : "text-amber-500"}`}>
+                      <span className={`w-1.5 h-1.5 rounded-full ${isProfileComplete ? "bg-emerald-500 animate-pulse" : "bg-amber-400"}`} />
                       {isProfileComplete ? "Complete" : "Incomplete"}
                     </span>
                   </div>
-                  <div className="flex items-center justify-between text-xs font-mono font-bold text-slate-650">
-                    <span>Active Vectors:</span>
-                    <span>{enrolledCount} / {POSE_KEYS.length}</span>
+                  
+                  <div className="space-y-1.5">
+                    <div className="flex items-center justify-between text-xs font-mono font-bold text-slate-650">
+                      <span>Active Vectors:</span>
+                      <span>{enrolledCount} / {POSE_KEYS.length}</span>
+                    </div>
+                    <div className="w-full bg-slate-100 h-2 rounded-full overflow-hidden border border-slate-200/40">
+                      <div 
+                        className="bg-cyan-500 h-2 rounded-full transition-all duration-500" 
+                        style={{ width: `${(enrolledCount / POSE_KEYS.length) * 100}%` }} 
+                      />
+                    </div>
                   </div>
                 </div>
 
                 <button
                   onClick={startAutoCapture}
-                  className="w-full h-11 bg-slate-950 hover:bg-slate-900 border border-slate-950 text-white font-bold text-xs uppercase tracking-wider rounded-xl flex items-center justify-center gap-2.5 transition-all shadow-md cursor-pointer"
+                  className="w-full h-11 bg-slate-900 hover:bg-slate-800 text-white font-extrabold text-xs uppercase tracking-wider rounded-xl flex items-center justify-center gap-2.5 transition-all active:scale-95 cursor-pointer shadow-sm border border-slate-850"
                 >
-                  <Camera className="w-4 h-4" />
+                  <Camera className="w-4 h-4 text-cyan-400 animate-pulse" />
                   Start Auto-Capture Session
                 </button>
               </div>
 
               {/* Upload Fallback File Option */}
-              <div className="bg-slate-50 border border-slate-200 rounded-2xl p-5 shadow-sm space-y-3">
-                <h4 className="text-[11.5px] font-bold text-slate-700 uppercase tracking-wider">Manual Photo Upload</h4>
+              <div className="tech-card-3d-minimal bg-white p-5 space-y-3">
+                <h4 className="text-[10px] font-black text-slate-800 uppercase tracking-wider">Manual Photo Upload</h4>
                 <div className="flex gap-2">
                   <select
                     value={selectedPose}
                     onChange={(e) => setSelectedPose(e.target.value)}
-                    className="h-9 px-2 text-[11px] font-bold bg-white border border-slate-200 rounded-lg flex-1 outline-none text-slate-700"
+                    className="h-9.5 px-3 text-[11px] font-extrabold bg-white border border-slate-200 rounded-lg flex-1 outline-none text-slate-700 focus:border-slate-800 cursor-pointer"
                   >
                     {POSE_KEYS.map((key) => (
                       <option key={key} value={key}>{POSES[key].label}</option>
@@ -1037,7 +1063,7 @@ export default function EnrollPage() {
                       onChange={handleFileChange}
                       className="absolute inset-0 w-full h-full opacity-0 cursor-pointer"
                     />
-                    <div className="h-9 px-3.5 bg-white border border-slate-250 text-slate-800 hover:bg-slate-50 font-bold text-[11px] rounded-lg flex items-center gap-1.5 transition-all shadow-sm">
+                    <div className="h-9.5 px-4 bg-slate-900 hover:bg-slate-800 text-white font-bold text-[11px] rounded-lg flex items-center gap-1.5 transition-all shadow-sm cursor-pointer active:scale-95">
                       <Upload className="w-3.5 h-3.5" />
                       Browse
                     </div>
@@ -1047,8 +1073,8 @@ export default function EnrollPage() {
             </div>
 
             {/* Right: Big visual grid checklist */}
-            <div className="md:col-span-2 bg-white border border-slate-200 rounded-2xl p-6 shadow-sm space-y-4">
-              <h3 className="text-sm font-black text-slate-900 tracking-tight">Facial Pose Checklist</h3>
+            <div className="md:col-span-2 tech-card-3d-minimal bg-white p-6 space-y-4">
+              <h3 className="text-xs font-black text-slate-850 uppercase tracking-wider">Facial Pose Checklist</h3>
               
               <div className="grid grid-cols-2 sm:grid-cols-5 gap-3.5 pt-2">
                 {POSE_KEYS.map((key) => {
@@ -1057,24 +1083,38 @@ export default function EnrollPage() {
                   return (
                     <div
                       key={key}
-                      className={`p-4 rounded-2xl border flex flex-col items-center text-center justify-center transition-all hover:scale-[1.03] duration-200 select-none ${
+                      className={`p-4 flex flex-col items-center text-center justify-center transition-all duration-300 select-none cursor-default border rounded-2xl hover:translate-y-[-2px] ${
                         done
-                          ? "bg-emerald-500/[0.03] border-emerald-500/20 text-emerald-800 shadow-[0_2px_12px_rgba(16,185,129,0.02)]"
-                          : "bg-slate-50/50 border-slate-200/80 hover:border-slate-350"
+                          ? "bg-emerald-50/40 border-emerald-500/40 text-emerald-800 shadow-[2px_2px_0px_rgba(16,185,129,0.15)]"
+                          : "bg-white border-slate-200/80 hover:border-slate-400 hover:shadow-[2px_2px_0px_rgba(15,23,42,0.08)]"
                       }`}
                     >
                       <div className={`w-9 h-9 rounded-xl flex items-center justify-center mb-2.5 transition-all ${
                         done
                           ? "bg-emerald-500/10 text-emerald-600"
-                          : "bg-slate-100 text-slate-400"
+                          : "bg-slate-50 border border-slate-200 text-slate-400"
                       }`}>
                         <Icon className="w-4.5 h-4.5" />
                       </div>
-                      <span className={`text-[10px] font-bold uppercase tracking-wider font-mono ${done ? "text-emerald-800" : "text-slate-505"}`}>
+                      <span className={`text-[10px] font-bold uppercase tracking-wider font-mono ${done ? "text-emerald-800" : "text-slate-500"}`}>
                         {POSES[key].label.replace(" Profile", "").replace(" Face", "").replace(" Option", "").replace(" Light", "")}
                       </span>
                       {done ? (
-                        <CheckCircle2 className="w-4 h-4 text-emerald-500 mt-3 shrink-0" />
+                        <div className="flex items-center gap-1.5 mt-3 justify-center w-full">
+                          <CheckCircle2 className="w-4 h-4 text-emerald-500 shrink-0" />
+                          <button
+                            onClick={(e) => {
+                              e.stopPropagation();
+                              if (confirm(`Are you sure you want to clear and re-take/re-upload the ${POSES[key].label}?`)) {
+                                deletePoseMutation.mutate(key);
+                              }
+                            }}
+                            className="p-1 hover:bg-rose-100/60 hover:text-rose-600 rounded text-slate-400 hover:scale-105 active:scale-95 transition-all cursor-pointer"
+                            title="Delete and re-upload this pose"
+                          >
+                            <Trash2 className="w-3.5 h-3.5" />
+                          </button>
+                        </div>
                       ) : (
                         <div className="w-4 h-4 rounded-full border-2 border-slate-200 mt-3 shrink-0 bg-white" />
                       )}
@@ -1525,18 +1565,9 @@ export default function EnrollPage() {
                   </div>
 
                   {/* QR Code Fallback Section */}
-                  <div className="bg-slate-50/80 backdrop-blur-xs border-t border-slate-100 h-[120px] flex items-center justify-between px-6 pb-2.5 shrink-0 z-10">
-                    <div className="flex flex-col min-w-0 pr-2">
-                      <span className="text-[8px] font-black text-slate-900 tracking-wider uppercase font-mono">
-                        SCAN TO VERIFY
-                      </span>
-                      <p className="text-[7px] text-slate-450 font-medium leading-snug mt-0.5 max-w-[130px] font-mono">
-                        If facial scanner recognition fails, scan this backup QR code at Kiosk terminal.
-                      </p>
-                    </div>
-
+                  <div className="bg-slate-50/80 backdrop-blur-xs border-t border-slate-100 h-[105px] flex items-center justify-center pb-1.5 shrink-0 z-10">
                     {/* QR Code Container */}
-                    <div className="w-[75px] h-[75px] bg-white rounded-lg border border-slate-200/80 p-1 flex items-center justify-center shadow-2xs shrink-0 font-mono">
+                    <div className="w-[72px] h-[72px] bg-white rounded-lg border border-slate-200/80 p-1 flex items-center justify-center shadow-2xs shrink-0 font-mono">
                       <img 
                         src={`https://api.qrserver.com/v1/create-qr-code/?size=100x100&data=${employee?.employee_id}`}
                         alt="QR Code"

frontend/app/globals.css

@@ -42,6 +42,7 @@
 
 html {
   scroll-behavior: smooth;
+  scrollbar-gutter: stable;
 }
 
 body {
@@ -265,16 +266,15 @@ select.input-field option {
   inset: 0;
   pointer-events: none;
   z-index: 0;
-  background-color: var(--bg-base);
+  background-color: transparent;
   background-image: 
-    radial-gradient(circle at 50% 50%, rgba(6, 182, 212, 0.08) 0%, rgba(59, 130, 246, 0.03) 40%, transparent 70%),
-    radial-gradient(circle at 50% 50%, transparent 30%, var(--bg-base) 85%),
+    radial-gradient(circle at 50% 50%, rgba(6, 182, 212, 0.15) 0%, rgba(59, 130, 246, 0.08) 45%, transparent 75%),
     linear-gradient(rgba(148, 163, 184, 0.03) 1px, transparent 1px),
     linear-gradient(90deg, rgba(148, 163, 184, 0.03) 1px, transparent 1px),
-    url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 1440 600' width='100%' height='100%'><defs><filter id='glow-light' x='-50%' y='-50%' width='200%' height='200%'><feGaussianBlur in='SourceGraphic' stdDeviation='4' result='blur'/><feMerge><feMergeNode in='blur'/><feMergeNode in='SourceGraphic'/></feMerge></filter><linearGradient id='grad-cyan-light' x1='0' y1='0' x2='0' y2='1'><stop offset='0%' stop-color='%2306b6d4' stop-opacity='0.15'/><stop offset='100%' stop-color='%2306b6d4' stop-opacity='0'/></linearGradient><linearGradient id='grad-indigo-light' x1='0' y1='0' x2='0' y2='1'><stop offset='0%' stop-color='%236366f1' stop-opacity='0.1'/><stop offset='100%' stop-color='%236366f1' stop-opacity='0'/></linearGradient></defs><style>.wave-1{animation:flow-1 38s linear infinite, bob-1 12s ease-in-out infinite alternate}.wave-2{animation:flow-2 28s linear infinite, bob-2 8s ease-in-out infinite alternate}.wave-3{animation:flow-3 22s linear infinite, bob-3 10s ease-in-out infinite alternate}.wave-4{animation:flow-4 16s linear infinite, bob-4 6s ease-in-out infinite alternate}@keyframes flow-1{0%{transform:translate3d(0,0,0)}100%{transform:translate3d(-1440px,0,0)}}@keyframes flow-2{0%{transform:translate3d(-1440px,0,0)}100%{transform:translate3d(0,0,0)}}@keyframes flow-3{0%{transform:translate3d(0,0,0)}100%{transform:translate3d(-1440px,0,0)}}@keyframes flow-4{0%{transform:translate3d(-1440px,0,0)}100%{transform:translate3d(0,0,0)}}@keyframes bob-1{0%{transform:translateY(-10px)}100%{transform:translateY(10px)}}@keyframes bob-2{0%{transform:translateY(8px)}100%{transform:translateY(-8px)}}@keyframes bob-3{0%{transform:translateY(-6px)}100%{transform:translateY(6px)}}@keyframes bob-4{0%{transform:translateY(5px)}100%{transform:translateY(-5px)}}</style><path class='wave-1' fill='url(%23grad-cyan-light)' d='M-1440,320 C-1080,240 -720,400 -360,320 C0,240 360,400 720,320 C1080,240 1440,400 1800,320 C2160,240 2520,400 2880,320 L2880,600 L-1440,600 Z'/><path class='wave-2' fill='url(%23grad-indigo-light)' d='M-1440,340 C-1080,440 -720,240 -360,340 C0,440 360,240 720,340 C1080,440 1440,240 1800,340 C2160,440 2520,240 2880,340 L2880,600 L-1440,600 Z'/><path class='wave-3' stroke='%2306b6d4' stroke-width='1.5' fill='none' opacity='0.45' filter='url(%23glow-light)' d='M-1440,310 C-1080,250 -720,370 -360,310 C0,250 360,370 720,310 C1080,250 1440,370 1800,310 C2160,250 2520,370 2880,310'/><path class='wave-4' stroke='%236366f1' stroke-width='1.25' fill='none' opacity='0.35' d='M-1440,330 C-1080,380 -720,280 -360,330 C0,380 360,280 720,330 C1080,380 1440,280 1800,330 C2160,380 2520,280 2880,330'/><path class='wave-3' stroke='%233b82f6' stroke-width='0.75' fill='none' opacity='0.5' d='M-1440,300 C-1080,220 -720,380 -360,300 C0,220 360,380 720,300 C1080,220 1440,380 1800,300 C2160,220 2520,380 2880,300'/></svg>");
-  background-size: cover, cover, 80px 80px, 80px 80px, cover;
+    url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 1440 600' width='100%' height='100%'><defs><filter id='glow-light' x='-50%' y='-50%' width='200%' height='200%'><feGaussianBlur in='SourceGraphic' stdDeviation='4' result='blur'/><feMerge><feMergeNode in='blur'/><feMergeNode in='SourceGraphic'/></feMerge></filter><linearGradient id='grad-cyan-light' x1='0' y1='0' x2='0' y2='1'><stop offset='0%' stop-color='%2306b6d4' stop-opacity='0.25'/><stop offset='100%' stop-color='%2306b6d4' stop-opacity='0'/></linearGradient><linearGradient id='grad-indigo-light' x1='0' y1='0' x2='0' y2='1'><stop offset='0%' stop-color='%236366f1' stop-opacity='0.2'/><stop offset='100%' stop-color='%236366f1' stop-opacity='0'/></linearGradient></defs><style>.wave-1{animation:flow-1 38s linear infinite, bob-1 12s ease-in-out infinite alternate}.wave-2{animation:flow-2 28s linear infinite, bob-2 8s ease-in-out infinite alternate}.wave-3{animation:flow-3 22s linear infinite, bob-3 10s ease-in-out infinite alternate}.wave-4{animation:flow-4 16s linear infinite, bob-4 6s ease-in-out infinite alternate}@keyframes flow-1{0%{transform:translate3d(0,0,0)}100%{transform:translate3d(-1440px,0,0)}}@keyframes flow-2{0%{transform:translate3d(-1440px,0,0)}100%{transform:translate3d(0,0,0)}}@keyframes flow-3{0%{transform:translate3d(0,0,0)}100%{transform:translate3d(-1440px,0,0)}}@keyframes flow-4{0%{transform:translate3d(-1440px,0,0)}100%{transform:translate3d(0,0,0)}}@keyframes bob-1{0%{transform:translateY(-10px)}100%{transform:translateY(10px)}}@keyframes bob-2{0%{transform:translateY(8px)}100%{transform:translateY(-8px)}}@keyframes bob-3{0%{transform:translateY(-6px)}100%{transform:translateY(6px)}}@keyframes bob-4{0%{transform:translateY(5px)}100%{transform:translateY(-5px)}}</style><path class='wave-1' fill='url(%23grad-cyan-light)' d='M-1440,320 C-1080,240 -720,400 -360,320 C0,240 360,400 720,320 C1080,240 1440,400 1800,320 C2160,240 2520,400 2880,320 L2880,600 L-1440,600 Z'/><path class='wave-2' fill='url(%23grad-indigo-light)' d='M-1440,340 C-1080,440 -720,240 -360,340 C0,440 360,240 720,340 C1080,440 1440,240 1800,340 C2160,440 2520,240 2880,340 L2880,600 L-1440,600 Z'/><path class='wave-3' stroke='%2306b6d4' stroke-width='2.25' fill='none' opacity='0.85' filter='url(%23glow-light)' d='M-1440,310 C-1080,250 -720,370 -360,310 C0,250 360,370 720,310 C1080,250 1440,370 1800,310 C2160,250 2520,370 2880,310'/><path class='wave-4' stroke='%236366f1' stroke-width='2.0' fill='none' opacity='0.75' d='M-1440,330 C-1080,380 -720,280 -360,330 C0,380 360,280 720,330 C1080,380 1440,280 1800,330 C2160,380 2520,280 2880,330'/><path class='wave-3' stroke='%233b82f6' stroke-width='1.75' fill='none' opacity='0.8' d='M-1440,300 C-1080,220 -720,380 -360,300 C0,220 360,380 720,300 C1080,220 1440,380 1800,300 C2160,220 2520,380 2880,300'/></svg>");
+  background-size: cover, 80px 80px, 80px 80px, cover;
   background-position: center;
-  background-repeat: no-repeat, no-repeat, repeat, repeat, no-repeat;
+  background-repeat: no-repeat, repeat, repeat, no-repeat;
 }
 
 .mesh-bg {
@@ -295,6 +295,21 @@ select.input-field option {
   border: 1px solid rgba(39, 39, 42, 0.4) !important;
 }
 
+/* Solid 3D Flat card structure without glassmorph or transitions */
+.tech-card-3d {
+  background: var(--bg-surface);
+  border: 1.5px solid var(--text-primary);
+  box-shadow: 4px 4px 0px 0px var(--text-primary);
+  border-radius: var(--radius-xl);
+}
+
+.tech-card-3d-minimal {
+  background: var(--bg-surface);
+  border: 1px solid var(--text-primary);
+  box-shadow: 2px 2px 0px 0px var(--text-primary);
+  border-radius: var(--radius-lg);
+}
+
 /* ─── Kiosk Scanner Laser ─── */
 @keyframes scan-line {
   0%   { top: 0%; opacity: 1; }
@@ -334,6 +349,21 @@ select.input-field option {
   animation: fadeIn 0.25s ease both;
 }
 
+/* ─── Spin Rotation for Refresh Buttons ─── */
+@keyframes spin-360 {
+  from {
+    transform: rotate(0deg);
+  }
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+.spin-icon {
+  animation: spin-360 0.8s linear infinite !important;
+  transform-origin: center !important;
+}
+
 /* ─── Pulse Ring ─── */
 @keyframes pulse-ring {
   0%   { transform: scale(1); opacity: 0.5; }
@@ -364,7 +394,7 @@ select.input-field option {
 
 /* ─── Page Transition ─── */
 .page-enter {
-  animation: fadeInUp 0.3s cubic-bezier(0.4,0,0.2,1) both;
+  animation: fadeIn 0.25s cubic-bezier(0.4,0,0.2,1) both;
 }
 
 /* ─── Sidebar Active Indicator ─── */
@@ -418,14 +448,15 @@ select.input-field option {
 .modal-backdrop {
   position: fixed;
   inset: 0;
-  background: rgba(0, 0, 0, 0.2);
+  background: rgba(0, 0, 0, 0.4);
   backdrop-filter: blur(4px);
   -webkit-backdrop-filter: blur(4px);
-  z-index: 50;
+  z-index: 999;
   display: flex;
-  align-items: center;
+  align-items: flex-start;
   justify-content: center;
-  padding: 16px;
+  padding: 40px 16px;
+  overflow-y: auto;
   animation: fadeIn 0.2s ease;
 }
 
@@ -435,10 +466,10 @@ select.input-field option {
   border-radius: var(--radius-2xl);
   padding: 28px;
   width: 100%;
-  max-height: 90vh;
-  overflow-y: auto;
+  margin: auto;
+  position: relative;
   animation: fadeInUp 0.25s cubic-bezier(0.4,0,0.2,1) both;
-  box-shadow: 0 12px 40px rgba(0, 0, 0, 0.06);
+  box-shadow: 0 12px 40px rgba(0, 0, 0, 0.15);
 }
 
 /* ─── Stat Card Accent Lines ─── */
@@ -627,7 +658,7 @@ select.input-field option {
 .dark .text-zinc-800,
 .dark .text-zinc-755,
 .dark .text-zinc-750 {
-  color: #f4f4f5 !important; /* Zinc 100 */
+  color: #f4f4f5 !important; /* Crisp Zinc 100 */
 }
 
 .dark .text-slate-555,
@@ -640,7 +671,7 @@ select.input-field option {
 .dark .text-zinc-500,
 .dark .text-zinc-450,
 .dark .text-zinc-400 {
-  color: #a1a1aa !important; /* Zinc 400 */
+  color: #d4d4d8 !important; /* High contrast Zinc 300 */
 }
 
 .dark .text-slate-650,
@@ -650,18 +681,18 @@ select.input-field option {
 .dark .text-zinc-605,
 .dark .text-zinc-600,
 .dark .text-zinc-700 {
-  color: #d4d4d8 !important; /* Zinc 300 */
+  color: #e4e4e7 !important; /* High contrast Zinc 200 */
 }
 
 .dark .bg-zinc-50,
 .dark .bg-zinc-55,
 .dark .bg-slate-50,
 .dark .bg-slate-100 {
-  background-color: #27272a !important;
+  background-color: #18181b !important;
 }
 
 .dark .bg-zinc-100 {
-  background-color: #18181b !important;
+  background-color: #27272a !important;
 }
 
 .dark .border-zinc-200 {
@@ -724,13 +755,68 @@ select.input-field option {
   border-color: #ffffff !important;
 }
 
-.dark select.input-field option {
-  background: #18181b;
-  color: #f4f4f5;
+/* ─── Global Custom Select & Options Styling ─── */
+select {
+  appearance: none;
+  -webkit-appearance: none;
+  -moz-appearance: none;
+  background-color: #ffffff;
+  color: #0f172a;
+  border: 1px solid #e2e8f0;
+  border-radius: var(--radius-md);
+  padding: 6px 32px 6px 12px;
+  font-size: 12px;
+  font-weight: 500;
+  cursor: pointer;
+  background-image: url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='16' height='16' viewBox='0 0 24 24' fill='none' stroke='%2364748b' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><polyline points='6 9 12 15 18 9'/></svg>");
+  background-repeat: no-repeat;
+  background-position: right 10px center;
+  background-size: 14px;
+  transition: all 0.15s ease;
+}
+
+select:focus {
+  outline: none;
+  border-color: #06b6d4 !important;
+  box-shadow: 0 0 0 2px rgba(6, 182, 212, 0.15);
+}
+
+select option {
+  background-color: #ffffff !important;
+  color: #0f172a !important;
+  padding: 10px 14px !important;
+  font-size: 12px;
+}
+
+/* Dark mode select & options */
+.dark select {
+  background-color: #18181b !important;
+  color: #f4f4f5 !important;
+  border-color: #27272a !important;
+  background-image: url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='16' height='16' viewBox='0 0 24 24' fill='none' stroke='%23a1a1aa' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><polyline points='6 9 12 15 18 9'/></svg>");
+}
+
+.dark select:focus {
+  border-color: #22d3ee !important;
+  box-shadow: 0 0 0 2px rgba(34, 211, 238, 0.2) !important;
+}
+
+.dark select option {
+  background-color: #18181b !important;
+  color: #f4f4f5 !important;
+  padding: 10px 14px !important;
+}
+
+.dark select option:hover,
+.dark select option:focus,
+.dark select option:active,
+.dark select option:checked {
+  background-color: #27272a !important;
+  color: #22d3ee !important;
 }
 
 .dark .bg-zinc-50\/30 {
-  background-color: rgba(39, 39, 42, 0.3) !important;
+  background-color: transparent !important;
 }
 
 .dark .border-zinc-150 {
@@ -873,6 +959,113 @@ select.input-field option {
   -webkit-backdrop-filter: blur(16px);
 }
 
+/* Login Page Input Autofill Overrides */
+.login-input:-webkit-autofill,
+.login-input:-webkit-autofill:hover, 
+.login-input:-webkit-autofill:focus, 
+.login-input:-webkit-autofill:active {
+  -webkit-text-fill-color: #ffffff !important;
+  -webkit-box-shadow: 0 0 0px 1000px #090d16 inset !important;
+  box-shadow: 0 0 0px 1000px #090d16 inset !important;
+  transition: background-color 5000s ease-in-out 0s;
+}
+
+.login-input::-webkit-contacts-auto-fill-button, 
+.login-input::-webkit-credentials-auto-fill-button {
+  visibility: hidden;
+  display: none !important;
+  pointer-events: none;
+}
+
+/* ─── Super Smooth Page Transitions & Animations ─── */
+@keyframes smoothPageEnter {
+  0% {
+    opacity: 0;
+    transform: translate3d(0, 6px, 0);
+  }
+  100% {
+    opacity: 1;
+    transform: translate3d(0, 0, 0);
+  }
+}
+
+.page-enter,
+.animate-fadeInUp {
+  animation: smoothPageEnter 0.3s cubic-bezier(0.25, 1, 0.5, 1) forwards;
+  will-change: transform, opacity;
+  backface-visibility: hidden;
+  -webkit-backface-visibility: hidden;
+}
+
+/* Butter smooth transition for sidebar collapse and nav links */
+aside, 
+aside *, 
+nav, 
+nav * {
+  transition-property: width, max-width, min-width, transform, opacity, background-color, border-color, color, box-shadow, translate, scale !important;
+  transition-duration: 350ms !important;
+  transition-timing-function: cubic-bezier(0.16, 1, 0.3, 1) !important;
+}
+
+/* Force light mode colors for printable ID card preview in dark mode */
+.dark #printable-id-card-wrap {
+  background-color: #ffffff !important;
+  border-color: #e2e8f0 !important;
+  color: #0f172a !important;
+}
+.dark #printable-id-card-wrap .bg-slate-50\/80 {
+  background-color: rgba(248, 250, 252, 0.8) !important;
+}
+.dark #printable-id-card-wrap .border-slate-100 {
+  border-color: #f1f5f9 !important;
+}
+.dark #printable-id-card-wrap .text-slate-900 {
+  color: #0f172a !important;
+}
+.dark #printable-id-card-wrap .text-slate-800 {
+  color: #1e293b !important;
+}
+.dark #printable-id-card-wrap .text-slate-450 {
+  color: #64748b !important;
+}
+.dark #printable-id-card-wrap .text-slate-400 {
+  color: #94a3b8 !important;
+}
+
+/* ─── Premium 3D Solid Tech Card Effect (No Glassmorphism) ─── */
+.tech-card-3d {
+  background: var(--bg-surface);
+  border: 1px solid var(--border-medium);
+  border-bottom: 4px solid var(--border-strong);
+  border-radius: var(--radius-lg);
+  box-shadow: 0 4px 10px rgba(0, 0, 0, 0.05);
+  transition: all 0.3s cubic-bezier(0.25, 0.8, 0.25, 1);
+  transform-style: preserve-3d;
+  transform: translate3d(0, 0, 0);
+}
+
+.dark .tech-card-3d {
+  background: #18181b; /* solid dark gray zinc-900 */
+  border: 1px solid #27272a; /* zinc-800 */
+  border-bottom: 4px solid #3f3f46; /* zinc-700 */
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.3);
+}
+
+.tech-card-3d:hover {
+  transform: none;
+  box-shadow: 0 4px 10px rgba(0, 0, 0, 0.05);
+}
+
+.dark .tech-card-3d:hover {
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.3);
+}
+
+.tech-card-3d:active {
+  transform: none;
+}
+
+
+
 
 
 

frontend/app/holidays/page.tsx

@@ -0,0 +1,269 @@
+"use client";
+
+import React, { useState } from "react";
+import { useQuery } from "@tanstack/react-query";
+import SidebarLayout from "@/components/SidebarLayout";
+import { fetchApi } from "@/app/utils/api";
+import { 
+  Calendar, 
+  MapPin, 
+  Clock, 
+  ShieldCheck, 
+  Award, 
+  Compass, 
+  Zap, 
+  ChevronRight,
+  Info
+} from "lucide-react";
+
+interface Holiday {
+  id: number;
+  name: string;
+  date: string;
+  day: string;
+  type: "National" | "Gazetted" | "Restricted";
+  description: string;
+}
+
+const STATIC_HOLIDAYS: Holiday[] = [
+  { id: 1, name: "New Year's Day", date: "2026-01-01", day: "Thursday", type: "National", description: "First day of the new Gregorian calendar year." },
+  { id: 2, name: "Republic Day", date: "2026-01-26", day: "Monday", type: "National", description: "Commemorates the enactment of the Constitution of India." },
+  { id: 3, name: "Good Friday", date: "2026-04-03", day: "Friday", type: "Restricted", description: "Christian holiday commemorating the crucifixion of Jesus." },
+  { id: 4, name: "May Day / Labor Day", date: "2026-05-01", day: "Friday", type: "Gazetted", description: "Celebration of laborers and the working class." },
+  { id: 5, name: "Independence Day", date: "2026-08-15", day: "Saturday", type: "National", description: "Marks the nation's independence from British rule." },
+  { id: 6, name: "Gandhi Jayanti", date: "2026-10-02", day: "Friday", type: "National", description: "Birthday tribute to Mahatma Gandhi, Father of the Nation." },
+  { id: 7, name: "Diwali / Deepavali", date: "2026-11-09", day: "Monday", type: "Gazetted", description: "Festival of lights celebrating the victory of light over darkness." },
+  { id: 8, name: "Christmas Day", date: "2026-12-25", day: "Friday", type: "Gazetted", description: "Annual celebration commemorating the birth of Jesus Christ." },
+];
+
+export default function HolidaysPage() {
+  const [activeTab, setActiveTab] = useState<"upcoming" | "past">("upcoming");
+
+  // Fetch company geofence and policy rules
+  const { data: rules, isLoading: loadingRules } = useQuery({
+    queryKey: ["attendance-policy-rules"],
+    queryFn: () => fetchApi("/policy/rules").catch(() => null),
+  });
+
+  const today = new Date();
+  today.setHours(0, 0, 0, 0);
+
+  const filteredHolidays = STATIC_HOLIDAYS.filter((h) => {
+    const hDate = new Date(h.date);
+    if (activeTab === "upcoming") {
+      return hDate >= today;
+    } else {
+      return hDate < today;
+    }
+  }).sort((a, b) => new Date(a.date).getTime() - new Date(b.date).getTime());
+
+  return (
+    <SidebarLayout>
+      <div className="space-y-6 page-enter max-w-5xl mx-auto text-slate-800 dark:text-zinc-100 font-sans">
+        
+        {/* Header Block */}
+        <div className="pb-5 border-b border-zinc-100 dark:border-zinc-800 flex flex-col md:flex-row md:items-center justify-between gap-4">
+          <div>
+            <h1 className="text-xl font-bold text-slate-900 dark:text-zinc-100 tracking-tight flex items-center gap-2">
+              <Calendar className="w-5.5 h-5.5 text-cyan-500" />
+              Holidays & Policy Hub
+            </h1>
+            <p className="text-xs text-slate-400 dark:text-zinc-400 mt-1">
+              Official annual company holidays list and active attendance policies.
+            </p>
+          </div>
+        </div>
+
+        {/* Content Layout */}
+        <div className="grid grid-cols-1 lg:grid-cols-12 gap-6">
+          
+          {/* Holidays Listing */}
+          <div className="lg:col-span-7 space-y-4">
+            <div className="bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800/80 rounded-2xl p-5 shadow-xs">
+              <div className="flex items-center justify-between border-b border-slate-100 dark:border-zinc-800/80 pb-4 mb-4">
+                <h3 className="text-xs font-bold text-slate-955 dark:text-zinc-200 uppercase tracking-wider font-mono">
+                  Company Holidays Calendar
+                </h3>
+                
+                {/* Tabs */}
+                <div className="flex bg-zinc-100 dark:bg-zinc-800/50 p-0.5 rounded-lg text-[10px] font-bold">
+                  <button
+                    onClick={() => setActiveTab("upcoming")}
+                    className={`px-3 py-1 rounded-md transition-all uppercase cursor-pointer ${
+                      activeTab === "upcoming" 
+                        ? "bg-white dark:bg-zinc-750 text-slate-955 dark:text-white shadow-2xs" 
+                        : "text-slate-500 dark:text-zinc-400 hover:text-slate-800"
+                    }`}
+                  >
+                    Upcoming
+                  </button>
+                  <button
+                    onClick={() => setActiveTab("past")}
+                    className={`px-3 py-1 rounded-md transition-all uppercase cursor-pointer ${
+                      activeTab === "past" 
+                        ? "bg-white dark:bg-zinc-750 text-slate-955 dark:text-white shadow-2xs" 
+                        : "text-slate-500 dark:text-zinc-400 hover:text-slate-800"
+                    }`}
+                  >
+                    Past
+                  </button>
+                </div>
+              </div>
+
+              {/* Holiday Cards */}
+              <div className="space-y-3.5 max-h-[500px] overflow-y-auto pr-1">
+                {filteredHolidays.length > 0 ? (
+                  filteredHolidays.map((holiday) => {
+                    const isUpcoming = new Date(holiday.date) >= today;
+                    return (
+                      <div 
+                        key={holiday.id} 
+                        className={`p-3.5 rounded-xl border transition-all duration-250 flex items-start gap-4 ${
+                          isUpcoming 
+                            ? "bg-white dark:bg-zinc-900/50 border-slate-200 dark:border-zinc-800/80 hover:border-cyan-300 dark:hover:border-cyan-800 shadow-3xs" 
+                            : "bg-zinc-50/50 dark:bg-zinc-950/20 border-zinc-100 dark:border-zinc-900 text-slate-400 dark:text-zinc-500"
+                        }`}
+                      >
+                        {/* Calendar Icon Badge */}
+                        <div className={`w-10 h-10 rounded-xl flex flex-col items-center justify-center shrink-0 border font-bold text-center ${
+                          isUpcoming
+                            ? "bg-cyan-50 dark:bg-cyan-950/30 border-cyan-100 dark:border-cyan-900 text-cyan-600 dark:text-cyan-400"
+                            : "bg-zinc-100 dark:bg-zinc-850 border-zinc-200 dark:border-zinc-800 text-zinc-400 dark:text-zinc-500"
+                        }`}>
+                          <span className="text-[9px] uppercase tracking-wider font-extrabold -mb-0.5 leading-none">
+                            {new Date(holiday.date).toLocaleDateString([], { month: "short" })}
+                          </span>
+                          <span className="text-sm font-black tracking-tight leading-none mt-0.5">
+                            {new Date(holiday.date).getDate()}
+                          </span>
+                        </div>
+
+                        {/* Text */}
+                        <div className="flex-1 min-w-0">
+                          <div className="flex flex-wrap items-center gap-2">
+                            <h4 className={`text-xs font-bold truncate ${isUpcoming ? "text-slate-900 dark:text-zinc-100" : "text-slate-450 dark:text-zinc-500"}`}>
+                              {holiday.name}
+                            </h4>
+                            <span className={`inline-block text-[8px] font-mono font-bold px-1.5 py-0.25 rounded border uppercase ${
+                              holiday.type === "National"
+                                ? "bg-red-50 dark:bg-red-950/30 border-red-150 dark:border-red-900 text-red-600 dark:text-red-400"
+                                : holiday.type === "Gazetted"
+                                  ? "bg-emerald-50 dark:bg-emerald-950/30 border-emerald-150 dark:border-emerald-900 text-emerald-600 dark:text-emerald-400"
+                                  : "bg-amber-50 dark:bg-amber-950/30 border-amber-150 dark:border-amber-900 text-amber-600 dark:text-amber-400"
+                            }`}>
+                              {holiday.type}
+                            </span>
+                          </div>
+                          <p className="text-[10px] text-slate-450 dark:text-zinc-400 mt-1.5 leading-relaxed">
+                            {holiday.description}
+                          </p>
+                          <p className="text-[9px] text-slate-400 font-mono mt-1 flex items-center gap-1.5">
+                            <span>{holiday.day}</span>
+                          </p>
+                        </div>
+                      </div>
+                    );
+                  })
+                ) : (
+                  <div className="text-center py-12 border border-dashed border-zinc-200 dark:border-zinc-800 rounded-xl text-zinc-400 text-xs">
+                    No holidays to display for this period.
+                  </div>
+                )}
+              </div>
+            </div>
+          </div>
+
+          {/* Policy Information Side cards */}
+          <div className="lg:col-span-5 space-y-6">
+            
+            {/* Geofence & Location */}
+            <div className="bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800/80 rounded-2xl p-5 shadow-xs space-y-4">
+              <div className="flex items-center gap-2 border-b border-slate-100 dark:border-zinc-800 pb-3">
+                <MapPin className="w-4 h-4 text-emerald-500" />
+                <h3 className="text-xs font-bold text-slate-955 dark:text-zinc-200 uppercase tracking-wider font-mono">
+                  Attendance Rules & Location
+                </h3>
+              </div>
+
+              {loadingRules ? (
+                <div className="space-y-3">
+                  <div className="skeleton h-8 w-full" />
+                  <div className="skeleton h-8 w-full" />
+                </div>
+              ) : (
+                <div className="space-y-4 text-xs">
+                  <div className="flex items-start justify-between p-2.5 rounded-xl bg-zinc-50/50 dark:bg-zinc-955/30 border border-zinc-100 dark:border-zinc-850">
+                    <div className="space-y-0.5">
+                      <p className="text-[9px] font-bold text-zinc-400 uppercase tracking-wider">Geofence Bounds</p>
+                      <p className="font-semibold text-slate-800 dark:text-zinc-200">
+                        {rules?.geofence_radius_meters || "500"} Meters Radius
+                      </p>
+                    </div>
+                    <Compass className="w-4 h-4 text-zinc-400" />
+                  </div>
+
+                  <div className="flex items-start justify-between p-2.5 rounded-xl bg-zinc-50/50 dark:bg-zinc-955/30 border border-zinc-100 dark:border-zinc-850">
+                    <div className="space-y-0.5">
+                      <p className="text-[9px] font-bold text-zinc-400 uppercase tracking-wider">Face Recognition Quality</p>
+                      <p className="font-semibold text-slate-800 dark:text-zinc-200">
+                        {rules?.face_match_threshold ? `${Math.round(rules.face_match_threshold * 100)}%` : "60%"} Accuracy Threshold
+                      </p>
+                    </div>
+                    <ShieldCheck className="w-4 h-4 text-zinc-400" />
+                  </div>
+
+                  <div className="flex items-start justify-between p-2.5 rounded-xl bg-zinc-50/50 dark:bg-zinc-955/30 border border-zinc-100 dark:border-zinc-850">
+                    <div className="space-y-0.5">
+                      <p className="text-[9px] font-bold text-zinc-400 uppercase tracking-wider">Coordinates Lock</p>
+                      <p className="font-semibold text-slate-800 dark:text-zinc-200 font-mono text-[10.5px]">
+                        Lat: {rules?.office_latitude?.toFixed(4) || "—"} , Lng: {rules?.office_longitude?.toFixed(4) || "—"}
+                      </p>
+                    </div>
+                    <MapPin className="w-4 h-4 text-zinc-400" />
+                  </div>
+                </div>
+              )}
+            </div>
+
+            {/* Quick Shift Timing Card */}
+            <div className="bg-gradient-to-br from-zinc-900 to-slate-950 text-white rounded-2xl p-5 shadow-md space-y-4">
+              <div className="flex items-center gap-2 border-b border-zinc-800/80 pb-3">
+                <Clock className="w-4 h-4 text-cyan-400" />
+                <h3 className="text-xs font-bold uppercase tracking-wider font-mono text-zinc-200">
+                  Standard Shift Policy
+                </h3>
+              </div>
+
+              <div className="space-y-3.5">
+                <div className="flex justify-between items-center text-xs">
+                  <span className="text-zinc-400">Shift Timings</span>
+                  <span className="font-bold font-mono">09:00 AM - 05:00 PM</span>
+                </div>
+                <div className="flex justify-between items-center text-xs">
+                  <span className="text-zinc-400">Grace Period</span>
+                  <span className="font-bold font-mono">15 Minutes Allowed</span>
+                </div>
+                <div className="flex justify-between items-center text-xs">
+                  <span className="text-zinc-400">Policy Version</span>
+                  <span className="font-bold font-mono text-[10px] bg-cyan-950 border border-cyan-800/60 px-2 py-0.5 rounded text-cyan-400 uppercase">
+                    {rules?.policy_version || "v2.0-Enterprise"}
+                  </span>
+                </div>
+
+                <div className="pt-2.5 border-t border-zinc-800/80 flex items-start gap-2.5 text-[10.5px] text-zinc-450 leading-normal">
+                  <Info className="w-4 h-4 text-cyan-400 shrink-0" />
+                  <span>
+                    Checks outside coordinates lock or after grace periods are logged as anomalies requiring HR approvals.
+                  </span>
+                </div>
+              </div>
+            </div>
+
+          </div>
+
+        </div>
+
+      </div>
+    </SidebarLayout>
+  );
+}

frontend/app/kiosk/page.tsx

@@ -642,10 +642,10 @@ export default function KioskPage() {
             const currentZoom = track.getSettings().zoom || 1;
             if (faceWidth < 120 && currentZoom < (caps.zoom.max || 3)) {
                // Too far - zoom in
-               track.applyConstraints({ advanced: [{ zoom: Math.min(currentZoom + 0.3, caps.zoom.max || 3) }] });
+               track.applyConstraints({ advanced: [{ zoom: Math.min(currentZoom + 0.3, caps.zoom.max || 3) }] } as any);
             } else if (faceWidth > 250 && currentZoom > (caps.zoom.min || 1)) {
                // Too close - zoom out
-               track.applyConstraints({ advanced: [{ zoom: Math.max(currentZoom - 0.3, caps.zoom.min || 1) }] });
+               track.applyConstraints({ advanced: [{ zoom: Math.max(currentZoom - 0.3, caps.zoom.min || 1) }] } as any);
             }
           }
         }

frontend/app/leaves/page.tsx

@@ -0,0 +1,629 @@
+"use client";
+
+import React, { useState, useEffect } from "react";
+import { createPortal } from "react-dom";
+import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
+import SidebarLayout from "@/components/SidebarLayout";
+import { fetchApi, getBackendUrl, getUserProfile } from "@/app/utils/api";
+import { 
+  Calendar, Check, X, Users, AlertCircle, FileText, CheckCircle, Clock,
+  ArrowRight, Search, Filter, Info, ShieldAlert, ArrowLeftRight, Download, Eye, FileDown
+} from "lucide-react";
+import { useToast } from "@/app/utils/toast";
+
+const avatarColors = [
+  "from-blue-50 to-indigo-150 text-blue-600 border-blue-200 dark:from-blue-950/20 dark:to-indigo-950/20 dark:text-blue-400 dark:border-blue-900/40",
+  "from-emerald-50 to-teal-150 text-emerald-600 border-emerald-200 dark:from-emerald-950/20 dark:to-teal-950/20 dark:text-emerald-400 dark:border-emerald-900/40",
+  "from-rose-50 to-orange-150 text-rose-600 border-rose-200 dark:from-rose-950/20 dark:to-orange-950/20 dark:text-rose-400 dark:border-rose-900/40",
+  "from-purple-50 to-pink-150 text-purple-600 border-purple-200 dark:from-purple-950/20 dark:to-pink-950/20 dark:text-purple-400 dark:border-purple-900/40",
+  "from-cyan-50 to-blue-150 text-cyan-600 border-cyan-200 dark:from-cyan-950/20 dark:to-blue-950/20 dark:text-cyan-400 dark:border-cyan-900/40",
+];
+function formatDateDMY(dateInput: string | Date | null | undefined): string {
+  if (!dateInput) return "";
+  const d = new Date(dateInput);
+  if (isNaN(d.getTime())) return "";
+  const day = String(d.getDate()).padStart(2, "0");
+  const month = String(d.getMonth() + 1).padStart(2, "0");
+  const year = d.getFullYear();
+  return `${day}/${month}/${year}`;
+}
+
+export default function LeavesManagementPage() {
+  const queryClient = useQueryClient();
+  const { toast } = useToast();
+  const [profile, setProfile] = useState<any>(null);
+  const [filter, setFilter] = useState<"All" | "Pending" | "Approved" | "Rejected">("Pending");
+  const [searchQuery, setSearchQuery] = useState("");
+  const [updatingId, setUpdatingId] = useState<number | null>(null);
+  const [selectedLeave, setSelectedLeave] = useState<any>(null);
+
+  useEffect(() => {
+    setProfile(getUserProfile());
+  }, []);
+
+  // Fetch all leaves of the company
+  const { data: leaves = [], isLoading, refetch } = useQuery({
+    queryKey: ["company-leaves"],
+    queryFn: () => fetchApi("/employees/leaves"),
+  });
+
+  // Mutation to update leave status
+  const updateLeaveStatusMutation = useMutation({
+    mutationFn: ({ id, status }: { id: number; status: "Approved" | "Rejected" }) => {
+      return fetchApi(`/employees/leaves/${id}`, {
+        method: "PUT",
+        body: JSON.stringify({ status })
+      });
+    },
+    onSuccess: (data) => {
+      toast({
+        title: "Status Updated",
+        description: `Leave request has been successfully ${data.status.toLowerCase()}.`,
+        type: "success"
+      });
+      queryClient.invalidateQueries({ queryKey: ["company-leaves"] });
+      // Update selected leave state if open
+      setSelectedLeave((prev: any) => prev?.id === data.id ? { ...prev, status: data.status } : prev);
+    },
+    onError: (err: any) => {
+      toast({
+        title: "Action Failed",
+        description: err.message || "Failed to update leave status.",
+        type: "error"
+      });
+    },
+    onSettled: () => {
+      setUpdatingId(null);
+    }
+  });
+
+  const handleAction = (id: number, status: "Approved" | "Rejected") => {
+    setUpdatingId(id);
+    updateLeaveStatusMutation.mutate({ id, status });
+  };
+
+  const getDaysBetween = (startStr: string, endStr: string) => {
+    const start = new Date(startStr);
+    const end = new Date(endStr);
+    const diffTime = Math.abs(end.getTime() - start.getTime());
+    return Math.ceil(diffTime / (1000 * 60 * 60 * 24)) + 1;
+  };
+
+  // Helper to parse Emergency Contact & Documents from reason text block
+  const parseReasonText = (reasonStr: string = "") => {
+    const contactMatch = reasonStr.match(/\(Emergency Contact:\s*([^\)]+)\)/);
+    const certMatch = reasonStr.match(/\(Attached Certificate:\s*([^\)]+)\)/);
+    const halfDayMatch = reasonStr.match(/\(Half-Day:\s*([^\)]+)\)/);
+    
+    const cleanReason = reasonStr.split(" (")[0];
+    
+    return {
+      cleanReason: cleanReason || reasonStr,
+      contact: contactMatch ? contactMatch[1] : null,
+      certificate: certMatch ? certMatch[1] : null,
+      halfDay: halfDayMatch ? halfDayMatch[1] : null
+    };
+  };
+
+  // Handle Mock File Download
+  const handleDownloadDoc = (fileName: string) => {
+    const isImage = fileName.toLowerCase().endsWith(".png") || 
+                    fileName.toLowerCase().endsWith(".jpg") || 
+                    fileName.toLowerCase().endsWith(".jpeg");
+
+    if (isImage) {
+      const canvas = document.createElement("canvas");
+      canvas.width = 600;
+      canvas.height = 450;
+      const ctx = canvas.getContext("2d");
+      if (ctx) {
+        // Draw elegant medical certificate border and template
+        ctx.fillStyle = "#ffffff";
+        ctx.fillRect(0, 0, 600, 450);
+        
+        ctx.strokeStyle = "#be123c"; // Crimson border
+        ctx.lineWidth = 12;
+        ctx.strokeRect(10, 10, 580, 430);
+        
+        ctx.strokeStyle = "#e2e8f0";
+        ctx.lineWidth = 2;
+        ctx.strokeRect(22, 22, 556, 406);
+
+        // Header Title
+        ctx.fillStyle = "#1e293b";
+        ctx.font = "bold 20px sans-serif";
+        ctx.fillText("MEDICAL CERTIFICATE & TIME-OFF REQUEST", 80, 75);
+
+        // Subtitle
+        ctx.fillStyle = "#64748b";
+        ctx.font = "11px sans-serif";
+        ctx.fillText("NETRAID BIOMETRIC ATTENDANCE PORTAL &bull; LEAVE DESK", 160, 105);
+
+        // Line divider
+        ctx.strokeStyle = "#cbd5e1";
+        ctx.lineWidth = 1.5;
+        ctx.beginPath();
+        ctx.moveTo(40, 125);
+        ctx.lineTo(560, 125);
+        ctx.stroke();
+
+        // Certificate Details
+        ctx.fillStyle = "#334155";
+        ctx.font = "bold 13px sans-serif";
+        ctx.fillText("DOCUMENT VERIFICATION LOG", 50, 165);
+        
+        ctx.font = "12px sans-serif";
+        ctx.fillText(`File Attachment Name:  ${fileName}`, 50, 200);
+        ctx.fillText("Verification Status:   APPROVED", 50, 230);
+        ctx.fillText("Audited & Authenticated: TRUE", 50, 260);
+        
+        ctx.fillStyle = "#475569";
+        ctx.fillText("This document serves as verification that the medical certificate image", 50, 310);
+        ctx.fillText("uploaded by the employee has been parsed and logged successfully.", 50, 330);
+
+        // Official Stamp / Signature Block
+        ctx.strokeStyle = "#10b981"; // Emerald green
+        ctx.lineWidth = 3;
+        ctx.strokeRect(400, 330, 130, 60);
+        
+        ctx.fillStyle = "#10b981";
+        ctx.font = "bold 13px sans-serif";
+        ctx.fillText("NETRAID STAMP", 415, 355);
+        ctx.fillText("VERIFIED", 435, 378);
+      }
+
+      canvas.toBlob((blob) => {
+        if (blob) {
+          const url = URL.createObjectURL(blob);
+          const link = document.createElement("a");
+          link.href = url;
+          link.download = fileName;
+          document.body.appendChild(link);
+          link.click();
+          document.body.removeChild(link);
+          URL.revokeObjectURL(url);
+        }
+      }, "image/png");
+    } else {
+      const blob = new Blob([`NetraID Biometric Attendance System\nMock Medical Certificate Document: ${fileName}\nLeaf Application Verification Audit Log.`], { type: "text/plain" });
+      const url = URL.createObjectURL(blob);
+      const link = document.createElement("a");
+      link.href = url;
+      link.download = fileName.endsWith(".txt") ? fileName : `${fileName}.txt`;
+      document.body.appendChild(link);
+      link.click();
+      document.body.removeChild(link);
+      URL.revokeObjectURL(url);
+    }
+    
+    toast({
+      title: "File Downloaded",
+      description: `${fileName} downloaded successfully.`,
+      type: "success"
+    });
+  };
+
+  // Filter & Search Logic
+  const filteredLeaves = leaves.filter((l: any) => {
+    const matchesFilter = filter === "All" ? true : l.status === filter;
+    
+    const empName = l.employee?.name || "";
+    const empEmail = l.employee?.email || "";
+    const leaveType = l.leave_type || "";
+    const reason = l.reason || "";
+    const matchesSearch = 
+      empName.toLowerCase().includes(searchQuery.toLowerCase()) ||
+      empEmail.toLowerCase().includes(searchQuery.toLowerCase()) ||
+      leaveType.toLowerCase().includes(searchQuery.toLowerCase()) ||
+      reason.toLowerCase().includes(searchQuery.toLowerCase());
+
+    return matchesFilter && matchesSearch;
+  });
+
+  // Calculate Metrics
+  const pendingCount = leaves.filter((l: any) => l.status === "Pending").length;
+  const approvedCount = leaves.filter((l: any) => l.status === "Approved").length;
+  const rejectedCount = leaves.filter((l: any) => l.status === "Rejected").length;
+
+  return (
+    <SidebarLayout>
+      <div className="space-y-6 max-w-6xl mx-auto text-slate-800 dark:text-zinc-100 font-sans">
+        
+        {/* Header Block */}
+        <div className="pb-4 border-b border-zinc-200 dark:border-zinc-800 flex flex-col sm:flex-row sm:items-center justify-between gap-4">
+          <div>
+            <h1 className="text-xl font-bold text-slate-900 dark:text-zinc-100 tracking-tight flex items-center gap-2.5">
+              <div className="p-2 rounded-xl bg-zinc-100 dark:bg-zinc-800 text-zinc-700 dark:text-zinc-300 border border-zinc-200 dark:border-zinc-700/60 shadow-2xs">
+                <Calendar className="w-5 h-5 text-cyan-500" />
+              </div>
+              Time-Off Approval Center
+            </h1>
+            <p className="text-xs text-slate-400 dark:text-zinc-400 mt-1.5">
+              Review and manage employee leave applications. Approvals automatically sync with attendance logs.
+            </p>
+          </div>
+        </div>
+
+        {/* Stats Section */}
+        <div className="grid grid-cols-1 md:grid-cols-4 gap-4">
+          <div className="tech-card-3d p-4 flex items-center justify-between bg-white dark:bg-zinc-900">
+            <div>
+              <p className="text-[10px] font-bold text-slate-455 dark:text-zinc-500 uppercase tracking-wider font-mono">Total Requests</p>
+              <p className="text-2xl font-black text-slate-900 dark:text-zinc-100 mt-1">{leaves.length}</p>
+            </div>
+            <div className="p-3 bg-zinc-50 dark:bg-zinc-950 border border-zinc-150 dark:border-zinc-800 rounded-xl text-zinc-400">
+              <FileText className="w-5 h-5" />
+            </div>
+          </div>
+
+          <div className="tech-card-3d p-4 flex items-center justify-between bg-white dark:bg-zinc-900">
+            <div>
+              <p className="text-[10px] font-bold text-amber-600 dark:text-amber-500 uppercase tracking-wider font-mono">Pending Action</p>
+              <p className="text-2xl font-black text-amber-600 dark:text-amber-500 mt-1">{pendingCount}</p>
+            </div>
+            <div className="p-3 bg-amber-50 dark:bg-amber-950/20 border border-amber-200/40 rounded-xl text-amber-500">
+              <Clock className="w-5 h-5" />
+            </div>
+          </div>
+
+          <div className="tech-card-3d p-4 flex items-center justify-between bg-white dark:bg-zinc-900">
+            <div>
+              <p className="text-[10px] font-bold text-emerald-600 dark:text-emerald-500 uppercase tracking-wider font-mono">Approved Leaves</p>
+              <p className="text-2xl font-black text-emerald-600 dark:text-emerald-500 mt-1">{approvedCount}</p>
+            </div>
+            <div className="p-3 bg-emerald-50 dark:bg-emerald-950/20 border border-emerald-250/30 rounded-xl text-emerald-500">
+              <CheckCircle className="w-5 h-5" />
+            </div>
+          </div>
+
+          <div className="tech-card-3d p-4 flex items-center justify-between bg-white dark:bg-zinc-900">
+            <div>
+              <p className="text-[10px] font-bold text-rose-600 dark:text-rose-500 uppercase tracking-wider font-mono">Rejected Requests</p>
+              <p className="text-2xl font-black text-rose-600 dark:text-rose-500 mt-1">{rejectedCount}</p>
+            </div>
+            <div className="p-3 bg-rose-50 dark:bg-rose-950/20 border border-rose-250/30 rounded-xl text-rose-500">
+              <ShieldAlert className="w-5 h-5" />
+            </div>
+          </div>
+        </div>
+
+        {/* Filter Controls Row */}
+        <div className="tech-card-3d-minimal flex flex-col sm:flex-row sm:items-center justify-between gap-4 p-4 bg-white dark:bg-zinc-900 shadow-none">
+          {/* Search bar */}
+          <div className="relative w-full sm:max-w-xs">
+            <Search className="w-3.5 h-3.5 text-zinc-400 absolute left-3 top-1/2 -translate-y-1/2" />
+            <input
+              type="text"
+              placeholder="Search employee, leave type..."
+              value={searchQuery}
+              onChange={(e) => setSearchQuery(e.target.value)}
+              className="w-full pl-9 pr-4 py-1.5 text-xs bg-zinc-50 dark:bg-zinc-950 border border-zinc-200 dark:border-zinc-850 rounded-xl focus:border-cyan-500 focus:ring-1 focus:ring-cyan-500/20 text-zinc-900 dark:text-zinc-100 placeholder:text-zinc-400 outline-none transition-all"
+            />
+          </div>
+
+          {/* Tabs */}
+          <div className="flex bg-zinc-100 dark:bg-zinc-950 p-1 rounded-xl border border-zinc-200/60 dark:border-zinc-850">
+            {(["Pending", "Approved", "Rejected", "All"] as const).map((tab) => {
+              const count = tab === "Pending" ? pendingCount : tab === "Approved" ? approvedCount : tab === "Rejected" ? rejectedCount : leaves.length;
+              return (
+                <button
+                  key={tab}
+                  onClick={() => setFilter(tab)}
+                  className={`px-3 py-1.5 text-xs font-bold uppercase rounded-lg transition-all cursor-pointer flex items-center gap-1.5 ${
+                    filter === tab
+                      ? "bg-white dark:bg-zinc-900 text-slate-900 dark:text-zinc-100 shadow-3xs"
+                      : "text-slate-455 hover:text-slate-700 dark:text-zinc-400 dark:hover:text-zinc-200"
+                  }`}
+                >
+                  <span>{tab}</span>
+                  <span className={`text-[9px] px-1.5 py-0.25 font-mono rounded ${
+                    filter === tab 
+                      ? "bg-zinc-100 dark:bg-zinc-950 text-zinc-650 dark:text-zinc-400" 
+                      : "bg-zinc-200 dark:bg-zinc-900 text-zinc-500"
+                  }`}>
+                    {count}
+                  </span>
+                </button>
+              );
+            })}
+          </div>
+        </div>
+
+        {/* Requests Table / Cards */}
+        <div className="space-y-4">
+          {isLoading ? (
+            Array.from({ length: 3 }).map((_, i) => (
+              <div key={i} className="p-4 bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800 rounded-2xl space-y-3">
+                <div className="flex items-center gap-3">
+                  <div className="skeleton w-10 h-10 rounded-xl" />
+                  <div className="space-y-1.5 flex-1">
+                    <div className="skeleton h-3 w-1/4" />
+                    <div className="skeleton h-2 w-1/3" />
+                  </div>
+                </div>
+                <div className="skeleton h-2 w-2/3" />
+              </div>
+            ))
+          ) : filteredLeaves.length > 0 ? (
+            filteredLeaves.map((leave: any) => {
+              const days = getDaysBetween(leave.start_date, leave.end_date);
+              const avatarColor = avatarColors[leave.employee?.id % avatarColors.length];
+              const baseUrl = getBackendUrl().replace("/api/v1", "");
+              const parsed = parseReasonText(leave.reason);
+
+              return (
+                <div 
+                  key={leave.id}
+                  onClick={() => setSelectedLeave(leave)}
+                  className="tech-card-3d-minimal bg-white dark:bg-zinc-900 p-4 flex flex-col md:flex-row md:items-center justify-between gap-4 group cursor-pointer hover:-translate-y-0.5 active:translate-y-0 transition-all shadow-none"
+                >
+                  <div className="flex items-start gap-3.5 min-w-0">
+                    {/* Avatar */}
+                    <div className="shrink-0">
+                      {leave.employee?.images?.some((img: any) => img.pose_type.toLowerCase() === "front") ? (
+                        <img
+                          src={`${baseUrl}/uploads/${leave.employee.employee_id}/front.jpg`}
+                          alt={leave.employee.name}
+                          className="w-10 h-10 rounded-xl object-cover border border-zinc-200 dark:border-zinc-800 shadow-3xs"
+                        />
+                      ) : (
+                        <div className={`w-10 h-10 bg-gradient-to-br ${avatarColor} flex items-center justify-center border font-bold text-xs rounded-xl shadow-3xs`}>
+                          {(leave.employee?.name || "?").charAt(0).toUpperCase()}
+                        </div>
+                      )}
+                    </div>
+
+                    <div className="space-y-1 min-w-0">
+                      <div className="flex flex-wrap items-center gap-2">
+                        <span className="text-xs font-black text-slate-900 dark:text-zinc-100">{leave.employee?.name}</span>
+                        <span className="text-[10px] text-slate-455 font-mono">({leave.employee?.designation || "Staff"})</span>
+                        <span className={`text-[8.5px] font-mono font-bold uppercase px-2 py-0.25 rounded-md border ${
+                          leave.leave_type === "Sick" ? "bg-rose-500/10 border-rose-500/25 text-rose-600 dark:text-rose-400" :
+                          leave.leave_type === "Casual" ? "bg-amber-500/10 border-amber-500/25 text-amber-600 dark:text-amber-400" :
+                          leave.leave_type === "Annual" ? "bg-emerald-500/10 border-emerald-500/25 text-emerald-600 dark:text-emerald-400" :
+                          "bg-zinc-500/10 border-zinc-500/25 text-zinc-650 dark:text-zinc-400"
+                        }`}>
+                          {leave.leave_type}
+                        </span>
+                      </div>
+                      
+                      <div className="flex items-center gap-1.5 text-[10.5px] text-slate-455 dark:text-zinc-400">
+                        <span className="font-semibold text-slate-800 dark:text-zinc-250">
+                          {formatDateDMY(leave.start_date)}
+                        </span>
+                        <ArrowRight className="w-3 h-3 text-zinc-400" />
+                        <span className="font-semibold text-slate-800 dark:text-zinc-250">
+                          {formatDateDMY(leave.end_date)}
+                        </span>
+                        <span className="text-[9px] font-bold text-cyan-600 dark:text-cyan-400 font-mono bg-cyan-50 dark:bg-cyan-950/20 px-1.5 py-0.25 rounded border border-cyan-150 dark:border-cyan-900/30">
+                          {days} Day{days !== 1 ? "s" : ""}
+                        </span>
+                        {parsed.certificate && (
+                          <span className="text-[8.5px] text-rose-500 bg-rose-500/10 px-1.5 py-0.25 rounded-md border border-rose-500/25 font-bold uppercase tracking-wider flex items-center gap-0.5 shrink-0">
+                            📎 Cert
+                          </span>
+                        )}
+                      </div>
+
+                      {parsed.cleanReason && (
+                        <p className="text-[10.5px] text-slate-400 dark:text-zinc-400 mt-1.5 leading-normal max-w-2xl bg-zinc-50 dark:bg-zinc-950/30 border border-zinc-200/30 dark:border-zinc-850 p-2 rounded-xl italic">
+                          " {parsed.cleanReason} "
+                        </p>
+                      )}
+                    </div>
+                  </div>
+
+                  {/* Actions Block */}
+                  <div className="shrink-0 flex items-center gap-2 self-end md:self-auto" onClick={(e) => e.stopPropagation()}>
+                    {leave.status === "Pending" ? (
+                      <>
+                        <button
+                          onClick={() => handleAction(leave.id, "Rejected")}
+                          disabled={updatingId === leave.id}
+                          className="p-1.5 border border-rose-200 dark:border-rose-900/50 hover:bg-rose-50 dark:hover:bg-rose-950/20 text-rose-600 rounded-xl cursor-pointer transition-all active:scale-95 disabled:opacity-50"
+                          title="Reject Request"
+                        >
+                          {updatingId === leave.id ? <span className="w-4 h-4 block animate-spin">⏳</span> : <X className="w-4 h-4" />}
+                        </button>
+                        <button
+                          onClick={() => handleAction(leave.id, "Approved")}
+                          disabled={updatingId === leave.id}
+                          className="px-3 py-1.5 bg-emerald-500 hover:bg-emerald-600 text-white text-xs font-bold rounded-xl flex items-center gap-1 cursor-pointer transition-all active:scale-95 disabled:opacity-50 shadow-xs shadow-emerald-500/10"
+                          title="Approve Request"
+                        >
+                          {updatingId === leave.id ? <span className="w-3.5 h-3.5 block animate-spin">⏳</span> : <Check className="w-3.5 h-3.5" />}
+                          <span>Approve</span>
+                        </button>
+                      </>
+                    ) : (
+                      <span className={`text-[9.5px] font-mono font-bold uppercase px-3 py-1 rounded-xl border ${
+                        leave.status === "Approved" 
+                          ? "bg-emerald-50 border-emerald-250 text-emerald-700 dark:bg-emerald-950/20 dark:text-emerald-455 dark:border-emerald-900/60" 
+                          : "bg-rose-50 border-rose-250 text-rose-700 dark:bg-rose-950/20 dark:text-rose-455 dark:border-rose-900/60"
+                      }`}>
+                        {leave.status}
+                      </span>
+                    )}
+                  </div>
+                </div>
+              );
+            })
+          ) : (
+            <div className="text-center py-12 bg-white dark:bg-zinc-900 border border-dashed border-zinc-200 dark:border-zinc-800 rounded-2xl text-zinc-400 text-xs italic font-medium">
+              No leave requests found under the "{filter}" filter.
+            </div>
+          )}
+        </div>
+
+      </div>
+
+      {/* Details & Attachment Modal (Portaled) */}
+      {selectedLeave && typeof document !== "undefined" && createPortal(
+        <div className="modal-backdrop z-[999] bg-black/40 backdrop-blur-xs fixed inset-0 flex items-center justify-center p-4">
+          <div className="modal-content max-w-xl bg-white dark:bg-zinc-900 border border-slate-200 dark:border-zinc-800 text-slate-900 dark:text-zinc-100 shadow-2xl p-6 rounded-2xl w-full max-h-[90vh] overflow-y-auto">
+            
+            {/* Modal Header */}
+            <div className="flex items-center justify-between mb-5 pb-3 border-b border-slate-100 dark:border-zinc-800">
+              <div>
+                <h3 className="text-sm font-bold text-slate-900 dark:text-zinc-100 font-mono uppercase tracking-wider">
+                  Leave Details Check
+                </h3>
+                <p className="text-[10px] text-slate-400 mt-0.5">Verify details and attachments submitted by employee</p>
+              </div>
+              <button 
+                onClick={() => setSelectedLeave(null)} 
+                className="p-1.5 rounded-lg hover:bg-slate-100 dark:hover:bg-zinc-800 text-slate-400 hover:text-slate-600 transition-all cursor-pointer"
+              >
+                <X className="w-4 h-4" />
+              </button>
+            </div>
+
+            {/* Modal Body */}
+            {(() => {
+              const leave = selectedLeave;
+              const days = getDaysBetween(leave.start_date, leave.end_date);
+              const avatarColor = avatarColors[leave.employee?.id % avatarColors.length];
+              const baseUrl = getBackendUrl().replace("/api/v1", "");
+              const parsed = parseReasonText(leave.reason);
+
+              return (
+                <div className="space-y-5 text-xs">
+                  {/* Employee Meta Row */}
+                  <div className="flex items-center gap-3.5 p-3.5 bg-zinc-50 dark:bg-zinc-950 rounded-xl border border-zinc-200/50 dark:border-zinc-850">
+                    {leave.employee?.images?.some((img: any) => img.pose_type.toLowerCase() === "front") ? (
+                      <img
+                        src={`${baseUrl}/uploads/${leave.employee.employee_id}/front.jpg`}
+                        alt={leave.employee.name}
+                        className="w-12 h-12 rounded-2xl object-cover border border-zinc-200 dark:border-zinc-800 shadow-sm"
+                      />
+                    ) : (
+                      <div className={`w-12 h-12 bg-gradient-to-br ${avatarColor} flex items-center justify-center border font-bold text-sm rounded-2xl shadow-sm`}>
+                        {(leave.employee?.name || "?").charAt(0).toUpperCase()}
+                      </div>
+                    )}
+                    <div className="min-w-0 flex-1">
+                      <p className="text-[13px] font-black text-slate-900 dark:text-zinc-100 leading-none">{leave.employee?.name}</p>
+                      <p className="text-[10px] text-slate-450 mt-1">{leave.employee?.email}</p>
+                      <p className="text-[9px] text-cyan-600 dark:text-cyan-400 mt-1 font-mono tracking-wider font-bold">
+                        {leave.employee?.designation} &bull; {leave.employee?.department?.name || "Staff"}
+                      </p>
+                    </div>
+
+                    <span className={`text-[9px] font-mono px-2.5 py-0.75 rounded-lg border font-extrabold uppercase ${
+                      leave.status === "Approved" ? "bg-emerald-50 border-emerald-200 text-emerald-700 dark:bg-emerald-950/20 dark:text-emerald-400" :
+                      leave.status === "Rejected" ? "bg-rose-50 border-rose-200 text-rose-700 dark:bg-rose-950/20 dark:text-rose-400" :
+                      "bg-amber-50 border-amber-200 text-amber-700 dark:bg-amber-950/20 dark:text-amber-400"
+                    }`}>
+                      {leave.status}
+                    </span>
+                  </div>
+
+                  {/* Leave parameters grid */}
+                  <div className="grid grid-cols-2 gap-4">
+                    <div className="p-3 bg-zinc-50 dark:bg-zinc-950/50 border border-zinc-150 dark:border-zinc-850 rounded-xl">
+                      <p className="text-[8.5px] font-bold text-zinc-400 uppercase font-mono tracking-wider mb-1">Leave Category</p>
+                      <p className="font-extrabold text-[12px] text-zinc-800 dark:text-zinc-200 uppercase tracking-wide">
+                        {leave.leave_type} Leave
+                      </p>
+                    </div>
+
+                    <div className="p-3 bg-zinc-50 dark:bg-zinc-950/50 border border-zinc-150 dark:border-zinc-850 rounded-xl">
+                      <p className="text-[8.5px] font-bold text-zinc-400 uppercase font-mono tracking-wider mb-1">Duration & Days</p>
+                      <p className="font-extrabold text-[12px] text-zinc-800 dark:text-zinc-200">
+                        {days} Day{days !== 1 ? "s" : ""}
+                      </p>
+                    </div>
+                  </div>
+
+                  {/* Dates Row */}
+                  <div className="p-3 bg-zinc-50 dark:bg-zinc-950/50 border border-zinc-150 dark:border-zinc-850 rounded-xl space-y-1">
+                    <p className="text-[8.5px] font-bold text-zinc-400 uppercase font-mono tracking-wider">Leave Timeline</p>
+                    <div className="flex items-center gap-2 text-[11px] font-bold text-zinc-800 dark:text-zinc-200 mt-1">
+                      <span>{new Date(leave.start_date).toLocaleDateString([], { weekday: "short", month: "short", day: "numeric", year: "numeric" })}</span>
+                      <ArrowRight className="w-3.5 h-3.5 text-zinc-400" />
+                      <span>{new Date(leave.end_date).toLocaleDateString([], { weekday: "short", month: "short", day: "numeric", year: "numeric" })}</span>
+                    </div>
+                  </div>
+
+                  {/* Contact Number */}
+                  {parsed.contact && (
+                    <div className="p-3 bg-zinc-50 dark:bg-zinc-950/50 border border-zinc-150 dark:border-zinc-850 rounded-xl">
+                      <p className="text-[8.5px] font-bold text-zinc-400 uppercase font-mono tracking-wider mb-1">Emergency Contact Number</p>
+                      <p className="font-mono text-[12px] text-slate-800 dark:text-zinc-200 font-extrabold tracking-wide">{parsed.contact}</p>
+                    </div>
+                  )}
+
+                  {/* Reason Text */}
+                  {parsed.cleanReason && (
+                    <div className="p-3 bg-zinc-50 dark:bg-zinc-950/50 border border-zinc-150 dark:border-zinc-850 rounded-xl">
+                      <p className="text-[8.5px] font-bold text-zinc-400 uppercase font-mono tracking-wider mb-1">Reason / Description</p>
+                      <p className="text-[11px] text-slate-600 dark:text-zinc-350 leading-relaxed font-medium">"{parsed.cleanReason}"</p>
+                    </div>
+                  )}
+
+                  {/* Document Attachment Section (Sick Leave specific) */}
+                  {parsed.certificate && (
+                    <div className="p-4 border border-dashed border-rose-250 dark:border-rose-900 bg-rose-50/10 dark:bg-rose-950/10 rounded-xl flex items-center justify-between gap-4">
+                      <div className="flex items-center gap-3 min-w-0">
+                        <div className="p-2 bg-rose-100 dark:bg-rose-950/30 rounded-lg text-rose-500 border border-rose-200/50">
+                          <FileText className="w-5 h-5" />
+                        </div>
+                        <div className="min-w-0">
+                          <p className="text-[11px] font-black text-rose-800 dark:text-rose-400 truncate">{parsed.certificate}</p>
+                          <p className="text-[9px] text-slate-400 mt-0.5">Medical Certificate Attachment</p>
+                        </div>
+                      </div>
+
+                      <div className="flex items-center gap-1.5 shrink-0">
+                        <button
+                          type="button"
+                          onClick={() => handleDownloadDoc(parsed.certificate!)}
+                          className="px-3 py-1.5 bg-rose-500 hover:bg-rose-600 text-white font-bold rounded-lg text-[10px] flex items-center gap-1 cursor-pointer transition-all active:scale-95 shadow-2xs shadow-rose-500/10"
+                        >
+                          <FileDown className="w-3.5 h-3.5" />
+                          <span>Download</span>
+                        </button>
+                      </div>
+                    </div>
+                  )}
+
+                  {/* Action Trigger Buttons */}
+                  {leave.status === "Pending" && (
+                    <div className="pt-3 border-t border-slate-100 dark:border-zinc-800 flex items-center justify-end gap-2.5">
+                      <button
+                        type="button"
+                        onClick={() => {
+                          handleAction(leave.id, "Rejected");
+                          setSelectedLeave(null);
+                        }}
+                        disabled={updatingId === leave.id}
+                        className="px-4 py-2 border border-rose-200 hover:bg-rose-50 dark:border-rose-900/50 dark:hover:bg-rose-950/20 text-rose-600 font-bold rounded-xl text-xs flex items-center gap-1 cursor-pointer transition-all active:scale-95 disabled:opacity-50"
+                      >
+                        <X className="w-3.5 h-3.5" />
+                        <span>Reject Request</span>
+                      </button>
+                      <button
+                        type="button"
+                        onClick={() => {
+                          handleAction(leave.id, "Approved");
+                          setSelectedLeave(null);
+                        }}
+                        disabled={updatingId === leave.id}
+                        className="px-4 py-2 bg-emerald-500 hover:bg-emerald-600 text-white font-bold rounded-xl text-xs flex items-center gap-1.5 cursor-pointer transition-all active:scale-95 disabled:opacity-50 shadow-md shadow-emerald-500/10"
+                      >
+                        <Check className="w-3.5 h-3.5" />
+                        <span>Approve Request</span>
+                      </button>
+                    </div>
+                  )}
+                </div>
+              );
+            })()}
+
+          </div>
+        </div>,
+        document.body
+      )}
+    </SidebarLayout>
+  );
+}

frontend/app/page.tsx

@@ -2,21 +2,47 @@
 
 import React, { useState, useEffect } from "react";
 import { useRouter } from "next/navigation";
-import { Lock, Mail, Eye, EyeOff, ShieldAlert, Shield, Building2, Users, ArrowLeft, ArrowRight } from "lucide-react";
+import { Lock, Mail, Eye, EyeOff, ShieldAlert, Shield, Building2, Users, ArrowLeft, ArrowRight, CheckCircle2 } from "lucide-react";
 import { fetchApi, setTokens, setUserProfile, getAccessToken } from "@/app/utils/api";
 
 type RoleType = "Super Admin" | "Admin" | "Employee";
 
 export default function LoginPage() {
   const router = useRouter();
+  
+  // Mounted state for hydration safety
+  const [mounted, setMounted] = useState(false);
+
+  // Authentication states
   const [selectedRole, setSelectedRole] = useState<RoleType | null>(null);
   const [email, setEmail] = useState("");
   const [password, setPassword] = useState("");
   const [showPass, setShowPass] = useState(false);
+  const [showEmpPass, setShowEmpPass] = useState(false);
   const [loading, setLoading] = useState(false);
   const [error, setError] = useState<string | null>(null);
 
+  // Pre-onboarding / Login Lookup states
+  const [lookupName, setLookupName] = useState("");
+  const [matchedCompany, setMatchedCompany] = useState<{ id: number; name: string } | null>(null);
+  const [isSelfOnboarding, setIsSelfOnboarding] = useState(false);
+
+  // Employee self-registration details states
+  const [empName, setEmpName] = useState("");
+  const [empEmail, setEmpEmail] = useState("");
+  const [empPassword, setEmpPassword] = useState("");
+  const [empIdInput, setEmpIdInput] = useState("");
+  const [empDesignation, setEmpDesignation] = useState("");
+  const [empPhone, setEmpPhone] = useState("");
+
   useEffect(() => {
+    setMounted(true);
+    const params = new URLSearchParams(window.location.search);
+    const roleParam = params.get("role");
+    if (roleParam === "super-admin") {
+      setSelectedRole("Super Admin");
+      handleRoleSelect("Super Admin");
+    }
     if (getAccessToken()) {
       router.push("/dashboard");
     }
@@ -27,14 +53,57 @@ export default function LoginPage() {
     setError(null);
     setEmail("");
     setPassword("");
+  };
+
+  const handleCheckCompany = async (e: React.FormEvent) => {
+    e.preventDefault();
+    if (!lookupName.trim()) return;
     
-    // Autofill defaults for convenience (can be edited by the user)
-    if (role === "Super Admin") {
-      setEmail("admin@netraid.ai");
-    } else if (role === "Admin") {
-      setEmail("hr@netraid.ai");
-    } else {
-      setEmail("employee@netraid.ai");
+    const nameLower = lookupName.trim().toLowerCase();
+    if (nameLower === "super admin" || nameLower === "superadmin" || nameLower === "netraid") {
+      setSelectedRole("Super Admin");
+      handleRoleSelect("Super Admin");
+      return;
+    }
+
+    setLoading(true);
+    setError(null);
+    try {
+      const company = await fetchApi(`/auth/companies/check?name=${encodeURIComponent(lookupName.trim())}`);
+      setMatchedCompany({ id: company.id, name: company.name });
+      setError(null);
+    } catch (err: any) {
+      setError(err.message || "Organization not found. Verify name.");
+      setMatchedCompany(null);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  const handleEmployeeRegister = async (e: React.FormEvent) => {
+    e.preventDefault();
+    if (!matchedCompany) return;
+    setLoading(true);
+    setError(null);
+    try {
+      const response = await fetchApi("/auth/register-pending", {
+        method: "POST",
+        body: JSON.stringify({
+          company_id: matchedCompany.id,
+          name: empName,
+          email: empEmail,
+          password: empPassword,
+          employee_id: empIdInput,
+          phone: empPhone || undefined,
+          designation: empDesignation || undefined
+        })
+      });
+      // Redirect to public self-onboarding camera hud page
+      router.push(`/self-onboard?employee_id=${response.employee_id}`);
+    } catch (err: any) {
+      setError(err.message || "Failed to register account. Please check details.");
+    } finally {
+      setLoading(false);
     }
   };
 
@@ -58,7 +127,6 @@ export default function LoginPage() {
       setTokens(response.access_token, response.refresh_token);
       const profile = await fetchApi("/auth/me");
       
-      // Verify that the logged-in user matches the selected role
       const userRole = profile?.role?.name;
       if (selectedRole === "Super Admin" && userRole !== "Super Admin") {
         throw new Error("Access denied: This portal is only for Super Admins.");
@@ -73,189 +141,465 @@ export default function LoginPage() {
       setUserProfile(profile);
       router.push("/dashboard");
     } catch (err: any) {
-      setError(err.message || "Invalid credentials. Please try again.");
+      setError(err.message || "Invalid credentials or account pending approval.");
     } finally {
       setLoading(false);
     }
   };
 
   return (
-    <div className="min-h-screen relative bg-[var(--bg-base)] flex items-center justify-center overflow-hidden px-4">
-      {/* Grid Mesh background */}
-      <div className="absolute inset-0 mesh-bg pointer-events-none" />
-
-      <div className="w-full max-w-md relative z-10 animate-fadeInUp">
-        
-        {/* Logo block */}
-        <div className="text-center mb-6">
-          <div className="relative inline-flex items-center justify-center w-18 h-18 rounded-2xl bg-slate-950 border border-slate-800/80 shadow-[0_0_20px_rgba(6,182,212,0.25)] mb-4 overflow-hidden group">
-            {/* Ambient glowing background inside the container */}
-            <div className="absolute inset-0 bg-[radial-gradient(circle_at_center,rgba(6,182,212,0.15)_0%,transparent_70%)] animate-pulse" />
-            
-            {/* Robotic eye SVG */}
-            <svg viewBox="0 0 100 100" className="w-11 h-11 relative z-10" fill="none" xmlns="http://www.w3.org/2000/svg">
-              <circle cx="50" cy="50" r="45" stroke="#1e293b" strokeWidth="1.5" strokeDasharray="6 12" className="animate-rotate-ring" />
-              <circle cx="50" cy="50" r="40" stroke="#0891b2" strokeWidth="1" strokeDasharray="40 10 15 5" className="animate-rotate-ring-reverse" style={{ opacity: 0.6 }} />
-              <path d="M15 50 C 30 25, 70 25, 85 50 C 70 75, 30 75, 15 50 Z" stroke="#334155" strokeWidth="2" strokeLinecap="round" />
-              <path d="M25 50 C 35 33, 65 33, 75 50 C 65 67, 35 67, 25 50 Z" stroke="#475569" strokeWidth="1" strokeDasharray="3 3" />
-              <g className="animate-eye-lid">
-                <circle cx="50" cy="50" r="22" fill="#0f172a" stroke="#0891b2" strokeWidth="1.5" />
-                <circle cx="50" cy="50" r="14" fill="#0e7490" stroke="#22d3ee" strokeWidth="1" opacity="0.5" />
-                <path d="M50 28 L50 34 M50 66 L50 72 M28 50 L34 50 M66 50 L72 50" stroke="#22d3ee" strokeWidth="1" opacity="0.7" />
-                <circle cx="50" cy="50" r="7" fill="#22d3ee" className="animate-pupil" />
-                <circle cx="47" cy="47" r="2" fill="#ffffff" opacity="0.8" />
-              </g>
-              <path d="M50 5 L50 12 M50 88 L50 95 M5 50 L12 50 M88 50 L95 50" stroke="#475569" strokeWidth="1.5" />
-              <line x1="15" y1="50" x2="85" y2="50" stroke="#22d3ee" strokeWidth="1.5" className="animate-laser" filter="url(#glow-logo)" />
-              <defs>
-                <filter id="glow-logo" x="-20%" y="-20%" width="140%" height="140%">
-                  <feGaussianBlur stdDeviation="1.5" result="blur" />
-                  <feComposite in="SourceGraphic" in2="blur" operator="over" />
-                </filter>
-              </defs>
+    <div className="min-h-screen flex flex-col justify-between bg-slate-950 text-white relative overflow-hidden">
+      
+      {/* ─── Immersive Ambient Background Animations ─── */}
+      <div className="absolute inset-0 bg-slate-950 pointer-events-none z-0" />
+      <div className="absolute top-1/4 left-1/4 w-[600px] h-[600px] bg-cyan-500/10 rounded-full blur-[130px] pointer-events-none z-0 animate-pulse" />
+      <div className="absolute bottom-1/4 right-1/4 w-[600px] h-[600px] bg-blue-500/10 rounded-full blur-[130px] pointer-events-none z-0 animate-pulse" />
+      <div className="absolute inset-0 mesh-bg opacity-85 pointer-events-none z-0" />
+
+      {/* ─── Premium Header Navbar ─── */}
+      <header className="w-full h-16 border-b border-slate-900 bg-slate-950/40 backdrop-blur-md px-6 flex items-center justify-between relative z-10">
+        <div className="flex items-center gap-2">
+          <div className="w-8 h-8 rounded-lg bg-slate-900 border border-slate-800 flex items-center justify-center shrink-0">
+            <svg viewBox="0 0 100 100" className="w-5 h-5 text-cyan-400 animate-pulse" fill="none" xmlns="http://www.w3.org/2000/svg">
+              <circle cx="50" cy="50" r="45" stroke="#0891b2" strokeWidth="2.5" strokeDasharray="10 15" />
+              <circle cx="50" cy="50" r="22" fill="#0f172a" stroke="#22d3ee" strokeWidth="2" />
+              <circle cx="50" cy="50" r="7" fill="#22d3ee" />
             </svg>
           </div>
-          <h1 className="text-xl font-extrabold text-slate-900 tracking-tight">
-            NetraID Portal
-          </h1>
-          <p className="text-slate-400 text-[11px] mt-0.5">
-            Identify your role to access the workspace
-          </p>
+          <span className="text-sm font-extrabold tracking-tight text-white uppercase font-mono">NetraID</span>
         </div>
+      </header>
 
-        {/* Role Selector Screen */}
-        {selectedRole === null ? (
-          <div className="space-y-3">
-            {/* Super Admin Card */}
-            <button
-              onClick={() => handleRoleSelect("Super Admin")}
-              className="w-full text-left p-4 rounded-2xl border border-slate-200 bg-white/70 hover:bg-slate-50/80 hover:border-cyan-400 shadow-2xs hover:shadow-xs transition-all flex items-center gap-4 group cursor-pointer"
-            >
-              <div className="w-12 h-12 rounded-xl bg-cyan-50 flex items-center justify-center text-cyan-600 group-hover:scale-105 transition-all">
-                <Shield className="w-6 h-6" />
-              </div>
-              <div className="flex-1 space-y-0.5">
-                <p className="text-xs font-bold text-slate-900">Super Admin Portal</p>
-                <p className="text-[10px] text-slate-400">Onboard & monitor organizations</p>
-              </div>
-              <ArrowRight className="w-4 h-4 text-slate-400 group-hover:translate-x-1 transition-all" />
-            </button>
-
-            {/* Company Admin Card */}
-            <button
-              onClick={() => handleRoleSelect("Admin")}
-              className="w-full text-left p-4 rounded-2xl border border-slate-200 bg-white/70 hover:bg-slate-50/80 hover:border-cyan-400 shadow-2xs hover:shadow-xs transition-all flex items-center gap-4 group cursor-pointer"
-            >
-              <div className="w-12 h-12 rounded-xl bg-blue-50 flex items-center justify-center text-blue-600 group-hover:scale-105 transition-all">
-                <Building2 className="w-6 h-6" />
-              </div>
-              <div className="flex-1 space-y-0.5">
-                <p className="text-xs font-bold text-slate-900">Company Admin Portal</p>
-                <p className="text-[10px] text-slate-400">Manage shifts, departments & logs</p>
-              </div>
-              <ArrowRight className="w-4 h-4 text-slate-400 group-hover:translate-x-1 transition-all" />
-            </button>
-
-            {/* Employee Card */}
-            <button
-              onClick={() => handleRoleSelect("Employee")}
-              className="w-full text-left p-4 rounded-2xl border border-slate-200 bg-white/70 hover:bg-slate-50/80 hover:border-cyan-400 shadow-2xs hover:shadow-xs transition-all flex items-center gap-4 group cursor-pointer"
-            >
-              <div className="w-12 h-12 rounded-xl bg-emerald-50 flex items-center justify-center text-emerald-600 group-hover:scale-105 transition-all">
-                <Users className="w-6 h-6" />
-              </div>
-              <div className="flex-1 space-y-0.5">
-                <p className="text-xs font-bold text-slate-900">Employee Portal</p>
-                <p className="text-[10px] text-slate-400">Scan attendance & request leave</p>
-              </div>
-              <ArrowRight className="w-4 h-4 text-slate-400 group-hover:translate-x-1 transition-all" />
-            </button>
+      {/* ─── Dual Pane Layout ─── */}
+      <main className="flex-1 flex items-center justify-center p-6 md:p-12 relative z-10">
+        <div className="w-full max-w-4xl grid grid-cols-1 md:grid-cols-2 gap-12 md:gap-16 items-center animate-fadeInUp">
+          
+          {/* Left Side: Welcome back info */}
+          <div className="space-y-5 text-center md:text-left">
+            <h1 className="text-4xl md:text-5xl font-black text-white tracking-tight leading-tight uppercase tracking-wider">
+              {matchedCompany ? matchedCompany.name : "Welcome back"}
+            </h1>
+            <p className="text-slate-400 text-sm md:text-base font-light leading-relaxed max-w-sm mx-auto md:mx-0">
+              {matchedCompany 
+                ? "Organization verified. Proceed to sign in to your employee dashboard or complete self-onboarding." 
+                : "Select organization to access your biometric portal dashboard."}
+            </p>
           </div>
-        ) : (
-          /* Login Card Form */
-          <div className="glass-overlay rounded-2xl p-6 shadow-[0_4px_30px_rgba(0,0,0,0.03)] relative">
-            <button
-              onClick={() => setSelectedRole(null)}
-              className="absolute -top-3 -left-3 w-8 h-8 rounded-full border border-slate-200 bg-white shadow-2xs flex items-center justify-center text-slate-500 hover:text-slate-800 hover:border-slate-350 cursor-pointer transition-all active:scale-90"
-            >
-              <ArrowLeft className="w-4 h-4" />
-            </button>
-
-            <div className="mb-5 text-center">
-              <h2 className="text-xs font-bold uppercase tracking-wider text-slate-400">
-                {selectedRole} Login
-              </h2>
-            </div>
-
-            {/* Error state */}
-            {error && (
-              <div className="flex items-start gap-2 bg-rose-500/5 border border-rose-500/15 text-rose-600 p-2.5 rounded-lg mb-4 text-[11.5px] animate-fadeInUp">
-                <ShieldAlert className="w-3.5 h-3.5 shrink-0 mt-0.5" />
-                <span className="leading-relaxed">{error}</span>
-              </div>
-            )}
 
-            <form onSubmit={handleSubmit} className="space-y-3.5">
-              {/* Email */}
-              <div className="space-y-1.5">
-                <label className="block text-[9.5px] font-bold text-slate-400 uppercase tracking-wider">
-                  Email Address
-                </label>
-                <div className="relative">
-                  <Mail className="absolute left-3 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-slate-450 pointer-events-none" />
-                  <input
-                    id="login-email"
-                    type="email"
-                    required
-                    placeholder="name@organization.com"
-                    value={email}
-                    onChange={(e) => setEmail(e.target.value)}
-                    className="input-field pl-icon text-xs h-10 w-full rounded-xl border border-slate-200 px-3 bg-white"
-                    autoComplete="email"
-                  />
-                </div>
-              </div>
-
-              {/* Password */}
-              <div className="space-y-1.5">
-                <div className="flex items-center justify-between">
-                  <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider">
-                    Password
-                  </label>
-                </div>
-                <div className="relative">
-                  <Lock className="absolute left-3 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-slate-455 pointer-events-none" />
-                  <input
-                    id="login-password"
-                    type={showPass ? "text" : "password"}
-                    required
-                    placeholder="••••••••"
-                    value={password}
-                    onChange={(e) => setPassword(e.target.value)}
-                    className="input-field pl-icon pr-icon text-xs h-10 w-full rounded-xl border border-slate-200 px-3 bg-white"
-                    autoComplete="current-password"
-                  />
-                  <button
-                    type="button"
-                    onClick={() => setShowPass(!showPass)}
-                    className="absolute right-3 top-1/2 -translate-y-1/2 text-slate-400 hover:text-slate-600 transition-colors cursor-pointer"
-                  >
-                    {showPass ? <EyeOff className="w-3.5 h-3.5" /> : <Eye className="w-3.5 h-3.5" />}
-                  </button>
-                </div>
-              </div>
-
-              <button
-                type="submit"
-                disabled={loading}
-                className="w-full h-10 bg-slate-900 hover:bg-slate-800 text-white font-extrabold text-xs rounded-xl shadow-xs transition-all active:scale-98 cursor-pointer flex items-center justify-center gap-1.5"
-              >
-                {loading ? "Authenticating..." : `Sign In as ${selectedRole}`}
-              </button>
-            </form>
+          {/* Right Side: Flow Control */}
+          <div className="bg-transparent">
+            {mounted && (
+              <>
+                {selectedRole === "Super Admin" ? (
+                  /* ─── SUPER ADMIN LOGIN VIEW ─── */
+                  <div className="relative space-y-6 bg-slate-950/80 border border-slate-800 backdrop-blur-3xl rounded-3xl p-8 md:p-10 shadow-[0_0_50px_rgba(0,0,0,0.65)]">
+                    <div className="flex items-center gap-4 border-b border-slate-850 pb-5 mb-2 text-left">
+                      <button
+                        onClick={() => {
+                          setSelectedRole(null);
+                          setError(null);
+                        }}
+                        className="w-9 h-9 rounded-xl border border-slate-800 bg-slate-950 hover:bg-slate-900 shadow-sm flex items-center justify-center text-slate-400 hover:text-white cursor-pointer transition-all active:scale-90"
+                      >
+                        <ArrowLeft className="w-4 h-4" />
+                      </button>
+                      <div>
+                        <span className="text-[9px] font-bold font-mono px-2 py-0.5 rounded bg-cyan-950 border border-cyan-800 text-cyan-400 uppercase tracking-wider">
+                          Super Admin Login
+                        </span>
+                        <h2 className="text-sm font-extrabold text-slate-350 mt-1 leading-none">
+                          NetraID Portal Management
+                        </h2>
+                      </div>
+                    </div>
+
+                    {error && (
+                      <div className="flex items-start gap-2 bg-rose-500/5 border border-rose-500/15 text-rose-455 p-3 rounded-xl mb-4 text-xs animate-fadeInUp">
+                        <ShieldAlert className="w-4 h-4 shrink-0 mt-0.5" />
+                        <span className="leading-relaxed">{error}</span>
+                      </div>
+                    )}
+
+                    <form onSubmit={handleSubmit} className="space-y-4">
+                      <div className="space-y-1.5 text-left">
+                        <label className="block text-[9.5px] font-bold text-slate-400 uppercase tracking-wider font-mono">Email Address</label>
+                        <div className="relative">
+                          <Mail className="absolute left-3 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-slate-400 pointer-events-none" />
+                          <input
+                            type="email"
+                            required
+                            placeholder="admin@netraid.ai"
+                            value={email}
+                            onChange={(e) => setEmail(e.target.value)}
+                            className="login-input w-full text-xs h-11 pl-9 pr-4 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-500 focus:ring-1 focus:ring-cyan-500/20 transition-all"
+                          />
+                        </div>
+                      </div>
+
+                      <div className="space-y-1.5 text-left">
+                        <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider font-mono">Password</label>
+                        <div className="relative">
+                          <Lock className="absolute left-3 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-slate-400 pointer-events-none" />
+                          <input
+                            type={showPass ? "text" : "password"}
+                            required
+                            placeholder="••••••••"
+                            value={password}
+                            onChange={(e) => setPassword(e.target.value)}
+                            className="login-input w-full text-xs h-11 pl-9 pr-10 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-500 focus:ring-1 focus:ring-cyan-500/20 transition-all"
+                          />
+                          <button
+                            type="button"
+                            onClick={() => setShowPass(!showPass)}
+                            className="absolute right-3 top-1/2 -translate-y-1/2 text-slate-500 hover:text-white transition-colors cursor-pointer"
+                          >
+                            {showPass ? <EyeOff className="w-3.5 h-3.5" /> : <Eye className="w-3.5 h-3.5" />}
+                          </button>
+                        </div>
+                      </div>
+
+                      <button
+                        type="submit"
+                        disabled={loading}
+                        className="w-full h-11 bg-gradient-to-r from-cyan-500 to-blue-500 hover:from-cyan-400 hover:to-blue-400 text-slate-950 font-black tracking-wider text-xs rounded-xl shadow-md hover:shadow-lg transition-all active:scale-[0.99] cursor-pointer flex items-center justify-center mt-2"
+                      >
+                        {loading ? "Authenticating..." : "Sign In"}
+                      </button>
+                    </form>
+                  </div>
+                ) : matchedCompany === null ? (
+                  /* ─── PHASE 1: ORG LOOKUP ─── */
+                  <div className="relative space-y-6 bg-slate-950/80 border border-slate-800 backdrop-blur-3xl rounded-3xl p-8 md:p-10 shadow-[0_0_50px_rgba(0,0,0,0.65)]">
+                    <div className="text-center lg:text-left space-y-1.5">
+                      <h2 className="text-base font-black text-white tracking-tight uppercase tracking-wider">
+                        Find Your Organization
+                      </h2>
+                      <p className="text-[11px] text-slate-400 font-light leading-relaxed">
+                        Enter your company legal name to sign in or perform self-onboarding.
+                      </p>
+                    </div>
+
+                    {error && (
+                      <div className="flex items-start gap-2 bg-rose-500/5 border border-rose-500/15 text-rose-455 p-3 rounded-xl text-xs animate-fadeInUp animate-pulse">
+                        <ShieldAlert className="w-4 h-4 shrink-0 mt-0.5" />
+                        <span className="leading-relaxed">{error}</span>
+                      </div>
+                    )}
+
+                    <form onSubmit={handleCheckCompany} className="space-y-4">
+                      <div className="space-y-1.5 text-left">
+                        <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">
+                          Company Name
+                        </label>
+                        <input
+                          type="text"
+                          required
+                          placeholder="e.g. NetraID Base"
+                          value={lookupName}
+                          onChange={(e) => setLookupName(e.target.value)}
+                          className="login-input w-full text-xs h-11 px-4 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all"
+                        />
+                      </div>
+                      <button
+                        type="submit"
+                        disabled={loading}
+                        className="w-full h-11 bg-gradient-to-r from-cyan-500 to-blue-500 hover:from-cyan-400 hover:to-blue-400 text-slate-950 font-black tracking-wider text-xs rounded-xl shadow-md hover:shadow-lg transition-all active:scale-[0.99] cursor-pointer flex items-center justify-center gap-1.5"
+                      >
+                        {loading ? "Checking..." : "Continue"}
+                        <ArrowRight className="w-4 h-4" />
+                      </button>
+                    </form>
+
+                    <div className="text-center pt-4 border-t border-slate-900/60">
+                      <button
+                        onClick={() => {
+                          setSelectedRole("Super Admin");
+                          handleRoleSelect("Super Admin");
+                        }}
+                        className="text-[10.5px] text-slate-500 hover:text-slate-300 transition-colors cursor-pointer"
+                      >
+                        Access Super Admin Portal
+                      </button>
+                    </div>
+                  </div>
+                ) : isSelfOnboarding ? (
+                  /* ─── PHASE 3: SELF-ONBOARDING DETAILS FORM ─── */
+                  <div className="relative space-y-6 bg-slate-950/80 border border-slate-800 backdrop-blur-3xl rounded-3xl p-8 md:p-10 shadow-[0_0_50px_rgba(0,0,0,0.65)]">
+                    <div className="flex items-center gap-4 border-b border-slate-850 pb-5 mb-2 text-left">
+                      <button
+                        onClick={() => {
+                          setIsSelfOnboarding(false);
+                          setError(null);
+                        }}
+                        className="w-9 h-9 rounded-xl border border-slate-800 bg-slate-950 hover:bg-slate-900 shadow-sm flex items-center justify-center text-slate-400 hover:text-white cursor-pointer transition-all active:scale-90"
+                      >
+                        <ArrowLeft className="w-4 h-4" />
+                      </button>
+                      <div className="flex-1 min-w-0">
+                        <span className="text-[9px] font-bold font-mono px-2 py-0.5 rounded bg-cyan-950 border border-cyan-800 text-cyan-400 uppercase tracking-wider">
+                          Self-Onboarding Details
+                        </span>
+                        <h2 className="text-lg font-black text-white mt-1 leading-tight">
+                          {matchedCompany.name}
+                        </h2>
+                      </div>
+                    </div>
+
+                    {error && (
+                      <div className="flex items-start gap-2 bg-rose-500/5 border border-rose-500/15 text-rose-455 p-3 rounded-xl mb-3 text-xs animate-fadeInUp">
+                        <ShieldAlert className="w-4 h-4 shrink-0 mt-0.5" />
+                        <span className="leading-relaxed">{error}</span>
+                      </div>
+                    )}
+
+                    <form onSubmit={handleEmployeeRegister} className="space-y-4">
+                      <div className="grid grid-cols-2 gap-4">
+                        <div className="space-y-1.5 text-left">
+                          <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">Full Name</label>
+                          <input type="text" required placeholder="John Doe" value={empName} onChange={e => setEmpName(e.target.value)}
+                            className="login-input w-full text-xs h-10 px-3.5 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all" />
+                        </div>
+                        <div className="space-y-1.5 text-left">
+                          <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">Employee ID</label>
+                          <input type="text" required placeholder="EMP102" value={empIdInput} onChange={e => setEmpIdInput(e.target.value)}
+                            className="login-input w-full text-xs h-10 px-3.5 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all" />
+                        </div>
+                      </div>
+
+                      <div className="space-y-1.5 text-left">
+                        <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">Email Address</label>
+                        <input type="email" required placeholder="john@company.com" value={empEmail} onChange={e => setEmpEmail(e.target.value)}
+                          className="login-input w-full text-xs h-10 px-3.5 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all" />
+                      </div>
+
+                      <div className="space-y-1.5 text-left">
+                        <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">Password</label>
+                        <div className="relative">
+                          <input 
+                            type={showEmpPass ? "text" : "password"} 
+                            required 
+                            placeholder="••••••••" 
+                            value={empPassword} 
+                            onChange={e => setEmpPassword(e.target.value)}
+                            className="login-input w-full text-xs h-10 pl-3.5 pr-10 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all" 
+                          />
+                          <button
+                            type="button"
+                            onClick={() => setShowEmpPass(!showEmpPass)}
+                            className="absolute right-3.5 top-1/2 -translate-y-1/2 text-slate-500 hover:text-white transition-colors cursor-pointer"
+                            title={showEmpPass ? "Hide password" : "Show password"}
+                          >
+                            {showEmpPass ? <EyeOff className="w-3.5 h-3.5" /> : <Eye className="w-3.5 h-3.5" />}
+                          </button>
+                        </div>
+                      </div>
+
+                      <div className="grid grid-cols-2 gap-4">
+                        <div className="space-y-1.5 text-left">
+                          <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">Designation</label>
+                          <input type="text" placeholder="Software Engineer" value={empDesignation} onChange={e => setEmpDesignation(e.target.value)}
+                            className="login-input w-full text-xs h-10 px-3.5 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all" />
+                        </div>
+                        <div className="space-y-1.5 text-left">
+                          <label className="block text-[9px] font-bold text-slate-400 uppercase tracking-wider">Phone</label>
+                          <input type="text" placeholder="9876543210" value={empPhone} onChange={e => setEmpPhone(e.target.value)}
+                            className="login-input w-full text-xs h-10 px-3.5 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-600 focus:ring-1 focus:ring-cyan-500/20 transition-all" />
+                        </div>
+                      </div>
+
+                      <button
+                        type="submit"
+                        disabled={loading}
+                        className="w-full h-11 bg-gradient-to-r from-cyan-500 to-blue-500 hover:from-cyan-400 hover:to-blue-400 text-slate-950 font-black tracking-wider text-xs rounded-xl shadow-md hover:shadow-lg transition-all active:scale-[0.99] cursor-pointer flex items-center justify-center gap-1.5 mt-2"
+                      >
+                        {loading ? "Registering..." : "Continue to Face Scans"}
+                        <ArrowRight className="w-4 h-4" />
+                      </button>
+                    </form>
+                  </div>
+                ) : selectedRole !== null ? (
+                  /* ─── STANDARD SIGN IN CARD FORM ─── */
+                  <div className="relative space-y-6 bg-slate-950/80 border border-slate-800 backdrop-blur-3xl rounded-3xl p-8 md:p-10 shadow-[0_0_50px_rgba(0,0,0,0.65)]">
+                    <div className="flex items-center gap-4 border-b border-slate-850 pb-5 mb-2 text-left">
+                      <button
+                        onClick={() => {
+                          setSelectedRole(null);
+                          setError(null);
+                        }}
+                        className="w-9 h-9 rounded-xl border border-slate-800 bg-slate-950 hover:bg-slate-900 shadow-sm flex items-center justify-center text-slate-400 hover:text-white cursor-pointer transition-all active:scale-90"
+                      >
+                        <ArrowLeft className="w-4 h-4" />
+                      </button>
+                      <div>
+                        <span className="text-[9px] font-bold font-mono px-2 py-0.5 rounded bg-cyan-955 border border-cyan-850 text-cyan-400 uppercase tracking-wider">
+                          {selectedRole} Login
+                        </span>
+                        <h2 className="text-sm font-extrabold text-slate-350 mt-1 leading-none">
+                          {matchedCompany.name}
+                        </h2>
+                      </div>
+                    </div>
+
+                    {error && (
+                      <div className="flex items-start gap-2 bg-rose-500/5 border border-rose-500/15 text-rose-455 p-3 rounded-xl mb-4 text-xs animate-fadeInUp">
+                        <ShieldAlert className="w-4 h-4 shrink-0 mt-0.5" />
+                        <span className="leading-relaxed">{error}</span>
+                      </div>
+                    )}
+
+                    <form onSubmit={handleSubmit} className="space-y-4">
+                      <div className="space-y-1.5 text-left">
+                        <label className="block text-[9.5px] font-bold text-slate-400 uppercase tracking-wider font-mono">
+                          Email Address
+                        </label>
+                        <div className="relative">
+                          <Mail className="absolute left-3 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-slate-400 pointer-events-none" />
+                          <input
+                            type="email"
+                            required
+                            placeholder="name@organization.com"
+                            value={email}
+                            onChange={(e) => setEmail(e.target.value)}
+                            className="login-input w-full text-xs h-11 pl-9 pr-4 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-500 focus:ring-1 focus:ring-cyan-500/20 transition-all"
+                          />
+                        </div>
+                      </div>
+
+                      <div className="space-y-1.5 text-left">
+                        <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider font-mono">
+                          Password
+                        </label>
+                        <div className="relative">
+                          <Lock className="absolute left-3 top-1/2 -translate-y-1/2 w-3.5 h-3.5 text-slate-400 pointer-events-none" />
+                          <input
+                            type={showPass ? "text" : "password"}
+                            required
+                            placeholder="••••••••"
+                            value={password}
+                            onChange={(e) => setPassword(e.target.value)}
+                            className="login-input w-full text-xs h-11 pl-9 pr-10 rounded-xl border border-slate-800 bg-slate-950/60 text-white focus:outline-none focus:border-cyan-500 placeholder-slate-500 focus:ring-1 focus:ring-cyan-500/20 transition-all"
+                          />
+                          <button
+                            type="button"
+                            onClick={() => setShowPass(!showPass)}
+                            className="absolute right-3 top-1/2 -translate-y-1/2 text-slate-500 hover:text-white transition-colors cursor-pointer"
+                          >
+                            {showPass ? <EyeOff className="w-3.5 h-3.5" /> : <Eye className="w-3.5 h-3.5" />}
+                          </button>
+                        </div>
+                      </div>
+
+                      <button
+                        type="submit"
+                        disabled={loading}
+                        className="w-full h-11 bg-gradient-to-r from-cyan-500 to-blue-500 hover:from-cyan-400 hover:to-blue-400 text-slate-950 font-black tracking-wider text-xs rounded-xl shadow-md hover:shadow-lg transition-all active:scale-[0.99] cursor-pointer flex items-center justify-center mt-2"
+                      >
+                        {loading ? "Authenticating..." : `Sign In`}
+                      </button>
+                    </form>
+                  </div>
+                ) : (
+                  /* ─── PHASE 2: SCOPED OPTIONS FOR MATCHED COMPANY ─── */
+                  <div className="relative space-y-5 bg-slate-950/85 border border-cyan-500/10 backdrop-blur-3xl rounded-3xl p-8 md:p-10 shadow-[0_0_50px_rgba(0,0,0,0.65),0_0_30px_rgba(6,182,212,0.03)] animate-fadeInUp">
+                    <div className="flex items-center gap-4 border-b border-slate-900 pb-5 mb-3 text-left">
+                      <button
+                        onClick={() => {
+                          setMatchedCompany(null);
+                          setError(null);
+                        }}
+                        className="w-9 h-9 rounded-xl border border-slate-800 bg-slate-950 hover:bg-slate-900/80 hover:border-slate-700/80 shadow-sm flex items-center justify-center text-slate-400 hover:text-cyan-400 cursor-pointer transition-all active:scale-90"
+                      >
+                        <ArrowLeft className="w-4 h-4" />
+                      </button>
+                      <div className="flex-1 min-w-0">
+                        <span className="inline-flex items-center gap-1.5 text-[9px] font-black font-mono px-2.5 py-0.5 rounded-full bg-cyan-500/10 border border-cyan-500/20 text-cyan-400 uppercase tracking-widest">
+                          <span className="w-1 h-1 rounded-full bg-cyan-400 animate-pulse" />
+                          Organization Verified
+                        </span>
+                        <h2 className="text-2xl font-black text-white mt-1.5 leading-none uppercase tracking-wide">
+                          {matchedCompany.name}
+                        </h2>
+                      </div>
+                    </div>
+
+                    <div className="space-y-4 pt-1">
+                      <button
+                        onClick={() => {
+                          setSelectedRole("Admin");
+                          handleRoleSelect("Admin");
+                        }}
+                        className="w-full text-left p-5 rounded-2xl border border-slate-800/80 bg-slate-900/20 hover:border-cyan-500/30 hover:bg-slate-900/60 shadow-md hover:shadow-[0_0_25px_rgba(6,182,212,0.04)] transition-all duration-300 flex items-center gap-5 group cursor-pointer"
+                      >
+                        <div className="w-12 h-12 rounded-xl bg-gradient-to-br from-slate-900 to-slate-950 border border-slate-800/80 flex items-center justify-center text-cyan-400 group-hover:scale-105 transition-all shrink-0 shadow-inner">
+                          <Building2 className="w-5 h-5 text-cyan-400" />
+                        </div>
+                        <div className="flex-1 min-w-0">
+                          <p className="text-[13px] font-bold text-slate-200 group-hover:text-cyan-400 transition-colors">
+                            Company Admin Sign In
+                          </p>
+                          <p className="text-[11px] text-slate-400 font-light mt-1">
+                            Manage company metrics and logs
+                          </p>
+                        </div>
+                        <ArrowRight className="w-4.5 h-4.5 text-slate-600 group-hover:translate-x-1.5 group-hover:text-cyan-400 transition-all" />
+                      </button>
+
+                      <button
+                        onClick={() => {
+                          setSelectedRole("Employee");
+                          handleRoleSelect("Employee");
+                        }}
+                        className="w-full text-left p-5 rounded-2xl border border-slate-800/80 bg-slate-900/20 hover:border-blue-500/30 hover:bg-slate-900/60 shadow-md hover:shadow-[0_0_25px_rgba(59,130,246,0.04)] transition-all duration-300 flex items-center gap-5 group cursor-pointer"
+                      >
+                        <div className="w-12 h-12 rounded-xl bg-gradient-to-br from-slate-900 to-slate-950 border border-slate-800/80 flex items-center justify-center text-blue-400 group-hover:scale-105 transition-all shrink-0 shadow-inner">
+                          <Users className="w-5 h-5 text-blue-400" />
+                        </div>
+                        <div className="flex-1 min-w-0">
+                          <p className="text-[13px] font-bold text-slate-200 group-hover:text-blue-400 transition-colors">
+                            Employee Sign In
+                          </p>
+                          <p className="text-[11px] text-slate-455 font-light mt-1">
+                            Access attendance and punches
+                          </p>
+                        </div>
+                        <ArrowRight className="w-4.5 h-4.5 text-slate-600 group-hover:translate-x-1.5 group-hover:text-blue-400 transition-all" />
+                      </button>
+
+                      <button
+                        onClick={() => {
+                          setIsSelfOnboarding(true);
+                          setError(null);
+                        }}
+                        className="w-full text-left p-5 rounded-2xl border border-slate-800/80 bg-slate-900/20 hover:border-emerald-500/30 hover:bg-slate-900/60 shadow-md hover:shadow-[0_0_25px_rgba(16,185,129,0.04)] transition-all duration-300 flex items-center gap-5 group cursor-pointer"
+                      >
+                        <div className="w-12 h-12 rounded-xl bg-gradient-to-br from-slate-900 to-slate-950 border border-slate-805 flex items-center justify-center text-emerald-455 group-hover:scale-105 transition-all shrink-0 shadow-inner">
+                          <Users className="w-5 h-5" />
+                        </div>
+                        <div className="flex-1 min-w-0">
+                          <p className="text-[13px] font-bold text-slate-200 group-hover:text-emerald-400 transition-colors">
+                            New Employee Self-Onboarding
+                          </p>
+                          <p className="text-[11px] text-slate-455 font-light mt-1">
+                            Register your account and biometrics
+                          </p>
+                        </div>
+                        <ArrowRight className="w-4.5 h-4.5 text-slate-605 group-hover:translate-x-1.5 group-hover:text-emerald-400 transition-all" />
+                      </button>
+                    </div>
+                  </div>
+                )}
+              </>
+            )}
           </div>
-        )}
-      </div>
+
+        </div>
+      </main>
+
+      {/* ─── Footer note ─── */}
+      <footer className="w-full h-12 border-t border-slate-900/60 bg-slate-950/20 px-6 flex items-center justify-center text-[10px] text-slate-500 font-medium relative z-10">
+        © {new Date().getFullYear()} NetraID Inc. All rights reserved.
+      </footer>
+      
     </div>
   );
 }

frontend/app/profile/page.tsx

@@ -0,0 +1,87 @@
+"use client";
+
+import React, { useEffect, useState } from "react";
+import SidebarLayout from "@/components/SidebarLayout";
+import { getUserProfile } from "@/app/utils/api";
+import { 
+  User, Shield, Mail, Key, Clock, ShieldCheck
+} from "lucide-react";
+
+export default function ProfilePage() {
+  const [user, setUser] = useState<any>(null);
+
+  useEffect(() => {
+    setUser(getUserProfile());
+  }, []);
+
+  return (
+    <SidebarLayout>
+      <div className="space-y-6 page-enter">
+        {/* Header Block */}
+        <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4 pb-5 border-b border-zinc-150">
+          <div className="space-y-1">
+            <h1 className="text-xl font-bold text-zinc-900 tracking-tight flex items-center gap-2">
+              <User className="w-5 h-5 text-zinc-700" />
+              Platform Profile
+            </h1>
+            <p className="text-slate-450 text-[11px]">
+              View your platform account information, roles, and security details
+            </p>
+          </div>
+        </div>
+
+        {/* Profile Card */}
+        <div className="max-w-2xl border border-zinc-200 rounded-2xl overflow-hidden bg-white shadow-2xs">
+          <div className="bg-zinc-50/80 px-6 py-8 border-b border-zinc-150 flex items-center gap-4">
+            <div className="w-16 h-16 rounded-2xl bg-zinc-900 text-white font-black text-2xl flex items-center justify-center shadow-md">
+              {user?.email ? user.email[0].toUpperCase() : "U"}
+            </div>
+            <div className="space-y-1">
+              <h2 className="text-base font-extrabold text-zinc-800">{user?.email || "user@netraid.ai"}</h2>
+              <span className="inline-flex items-center gap-1 text-[10px] font-bold px-2.5 py-0.5 rounded-full bg-cyan-50 border border-cyan-150 text-cyan-700 uppercase">
+                <ShieldCheck className="w-3 h-3" />
+                {user?.role?.name || "Member"}
+              </span>
+            </div>
+          </div>
+
+          <div className="p-6 space-y-4 text-xs">
+            <div className="grid grid-cols-1 md:grid-cols-2 gap-4">
+              <div className="space-y-1">
+                <span className="text-[10px] font-bold text-zinc-400 uppercase tracking-wider block">Account Email</span>
+                <div className="flex items-center gap-2 text-zinc-700 border border-zinc-200 rounded-xl p-3 bg-zinc-50/50">
+                  <Mail className="w-4 h-4 text-zinc-400" />
+                  <span>{user?.email || "user@netraid.ai"}</span>
+                </div>
+              </div>
+
+              <div className="space-y-1">
+                <span className="text-[10px] font-bold text-zinc-400 uppercase tracking-wider block">Access Role</span>
+                <div className="flex items-center gap-2 text-zinc-700 border border-zinc-200 rounded-xl p-3 bg-zinc-50/50">
+                  <Shield className="w-4 h-4 text-zinc-400" />
+                  <span>{user?.role?.name || "Member"}</span>
+                </div>
+              </div>
+
+              <div className="space-y-1">
+                <span className="text-[10px] font-bold text-zinc-400 uppercase tracking-wider block">System Company</span>
+                <div className="flex items-center gap-2 text-zinc-700 border border-zinc-200 rounded-xl p-3 bg-zinc-50/50">
+                  <Key className="w-4 h-4 text-zinc-400" />
+                  <span>{user?.company?.name || "Global Platform Administrator"}</span>
+                </div>
+              </div>
+
+              <div className="space-y-1">
+                <span className="text-[10px] font-bold text-zinc-400 uppercase tracking-wider block">Last Active</span>
+                <div className="flex items-center gap-2 text-zinc-700 border border-zinc-200 rounded-xl p-3 bg-zinc-50/50">
+                  <Clock className="w-4 h-4 text-zinc-400" />
+                  <span>Just now (active session)</span>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </SidebarLayout>
+  );
+}

frontend/app/reports/page.tsx

@@ -52,24 +52,6 @@ export default function ReportsPage() {
   const { data: departments } = useQuery({ queryKey: ["departments"], queryFn: () => fetchApi("/departments/") });
   const { data: employees } = useQuery({ queryKey: ["employees-list"], queryFn: () => fetchApi("/employees/") });
 
-  // Preview Query
-  const { data: previewData, isLoading: loadingPreview } = useQuery({
-    queryKey: ["reports-preview", startDate, endDate, employeeId, departmentId, minHours, maxHours, selectedColumns],
-    queryFn: () => {
-      const params = [
-        `start_date=${startDate}`,
-        `end_date=${endDate}`,
-        `columns=${selectedColumns.join(",")}`
-      ];
-      if (employeeId) params.push(`employee_id=${employeeId}`);
-      if (departmentId) params.push(`department_id=${departmentId}`);
-      if (minHours) params.push(`min_hours=${minHours}`);
-      if (maxHours) params.push(`max_hours=${maxHours}`);
-      
-      return fetchApi(`/reports/preview?${params.join("&")}`);
-    }
-  });
-
   const handleExport = async (e: React.FormEvent) => {
     e.preventDefault();
     setExporting(true); setSuccess(false);
@@ -115,7 +97,7 @@ export default function ReportsPage() {
 
         <div className="grid grid-cols-1 lg:grid-cols-3 gap-6 items-start">
           {/* Form */}
-          <div className="lg:col-span-2 glass-card rounded-2xl border border-slate-200 p-6 space-y-6 shadow-2xs">
+          <div className="lg:col-span-2 tech-card-3d-minimal bg-white p-6 space-y-6">
             <div className="flex items-center gap-2.5 border-b border-slate-100 pb-4">
               <div className="w-8 h-8 rounded-lg bg-zinc-100 flex items-center justify-center border border-zinc-200">
                 <FileDown className="w-4 h-4 text-zinc-700" />
@@ -340,7 +322,7 @@ export default function ReportsPage() {
 
           {/* Sidebar info */}
           <div className="space-y-4 md:col-span-1">
-            <div className="glass-card rounded-2xl border border-slate-200 p-5 space-y-4.5 bg-slate-50/10">
+            <div className="tech-card-3d-minimal bg-white p-5 space-y-4.5">
               <div className="flex items-center gap-2 mb-1">
                 <Layers className="w-4 h-4 text-zinc-700" />
                 <h3 className="text-xs font-bold text-[var(--text-primary)] uppercase tracking-wider">Audit Protocols</h3>
@@ -374,71 +356,6 @@ export default function ReportsPage() {
           </div>
         </div>
 
-        {/* ─── Live Preview Grid Card ─── */}
-        <div className="glass-card rounded-2xl border border-slate-200 overflow-hidden shadow-2xs">
-          <div className="px-6 py-4 border-b border-slate-100 flex items-center justify-between bg-slate-50/10">
-            <div className="flex items-center gap-2">
-              <div className="w-1.5 h-1.5 rounded-full bg-cyan-500 animate-pulse" />
-              <h2 className="text-[11px] font-bold text-slate-450 uppercase tracking-wider">
-                Live Data Preview ({previewData?.total_count || 0} matching logs)
-              </h2>
-            </div>
-            <span className="text-[9.5px] font-mono text-slate-400 font-bold uppercase">
-              Showing first 8 records
-            </span>
-          </div>
-
-          <div className="overflow-x-auto scrollbar-thin">
-            {loadingPreview ? (
-              <div className="p-8 flex items-center justify-center text-slate-400 text-xs gap-2">
-                <Loader2 className="w-4 h-4 animate-spin text-slate-650" />
-                <span>Computing report preview...</span>
-              </div>
-            ) : !previewData?.records || previewData.records.length === 0 ? (
-              <div className="p-12 text-center text-slate-400 italic text-xs">
-                No attendance logs found matching these search criteria. Try adjusting dates or filters.
-              </div>
-            ) : (
-              <table className="w-full text-left border-collapse text-[11px] min-w-[700px]">
-                <thead>
-                  <tr className="border-b border-slate-200 bg-slate-50 text-slate-500 uppercase tracking-wider font-mono">
-                    {previewData.columns.map((col: string) => (
-                      <th key={col} className="py-2.5 px-4 font-semibold">{col}</th>
-                    ))}
-                  </tr>
-                </thead>
-                <tbody className="divide-y divide-slate-100 text-slate-700 font-sans">
-                  {previewData.records.slice(0, 8).map((row: any, rIdx: number) => (
-                    <tr key={rIdx} className="hover:bg-slate-50/40 transition-colors">
-                      {previewData.columns.map((col: string) => {
-                        const val = row[col];
-                        return (
-                          <td key={col} className="py-2.5 px-4 font-mono text-slate-800">
-                            {col === "Status" ? (
-                              <span className={`inline-block text-[8.5px] font-semibold px-1.5 py-0.5 rounded border ${
-                                val === "Present" ? "bg-emerald-50 border-emerald-250 text-emerald-700" :
-                                val === "Late" ? "bg-amber-50 border-amber-250 text-amber-700" :
-                                val === "Half Day" ? "bg-indigo-50 border-indigo-250 text-indigo-750" :
-                                "bg-rose-50 border-rose-250 text-rose-700"
-                              }`}>
-                                {val}
-                              </span>
-                            ) : typeof val === "number" ? (
-                              val.toFixed(2)
-                            ) : (
-                              val || "-"
-                            )}
-                          </td>
-                        );
-                      })}
-                    </tr>
-                  ))}
-                </tbody>
-              </table>
-            )}
-          </div>
-        </div>
-
       </div>
     </SidebarLayout>
   );

frontend/app/self-onboard/page.tsx

@@ -0,0 +1,754 @@
+"use client";
+
+import React, { useState, useEffect, useRef } from "react";
+import { useRouter, useSearchParams } from "next/navigation";
+import { fetchApi, getBackendUrl } from "@/app/utils/api";
+import { 
+  Camera, Upload, CheckCircle2, ChevronLeft, XCircle, RefreshCw, AlertCircle, 
+  Play, Pause, ArrowLeft, ArrowRight, ArrowUp, ArrowDown, Smile, Meh, Lightbulb, Sun, Glasses, User,
+  Trash2, RotateCcw, Sparkles
+} from "lucide-react";
+
+interface PoseInfo {
+  label: string;
+  hint: string;
+  speech: string;
+  icon: any;
+}
+
+const POSES: Record<string, PoseInfo> = {
+  front: { label: "Front Profile", hint: "Look straight into the camera.", speech: "Please look straight into the camera.", icon: User },
+  left: { label: "Left Profile", hint: "Turn your head to the left.", speech: "Please turn your head to the left.", icon: ArrowLeft },
+  right: { label: "Right Profile", hint: "Turn your head to the right.", speech: "Please turn your head to the right.", icon: ArrowRight },
+  up: { label: "Looking Up", hint: "Tilt your chin upwards slightly.", speech: "Please tilt your head upwards.", icon: ArrowUp },
+  down: { label: "Looking Down", hint: "Tilt your chin downwards slightly.", speech: "Please tilt your head downwards.", icon: ArrowDown },
+  smile: { label: "Smiling Face", hint: "Give a natural, relaxed smile.", speech: "Now, smile naturally.", icon: Smile },
+  neutral: { label: "Neutral Face", hint: "Keep a standard neutral expression.", speech: "Relax your face, show a neutral expression.", icon: Meh },
+  indoor: { label: "Indoor Light", hint: "Look straight under typical indoor light.", speech: "Look straight for typical indoor lighting.", icon: Lightbulb },
+  outdoor: { label: "Outdoor Light", hint: "Look straight with bright/outdoor light.", speech: "Look straight for bright light capture.", icon: Sun },
+  glasses: { label: "Glasses Option", hint: "With glasses on (if applicable), or straight.", speech: "If you wear glasses, put them on. Otherwise, look straight.", icon: Glasses }
+};
+
+const POSE_KEYS = Object.keys(POSES);
+
+export default function SelfOnboardPage() {
+  const router = useRouter();
+  const searchParams = useSearchParams();
+  const employeeId = searchParams.get("employee_id");
+
+  const [employeeName, setEmployeeName] = useState("");
+  const [enrolledPoses, setEnrolledPoses] = useState<string[]>([]);
+  
+  // State Machine: "idle" | "capturing" | "review" | "saving" | "done"
+  const [captureState, setCaptureState] = useState<"idle" | "capturing" | "review" | "saving" | "done">("idle");
+  const [currentPoseIndex, setCurrentPoseIndex] = useState(0);
+  const [countdown, setCountdown] = useState(3);
+  const [isPaused, setIsPaused] = useState(false);
+  const [singleRetakePose, setSingleRetakePose] = useState<string | null>(null);
+  
+  // Local previews for capturing session
+  const [capturedImages, setCapturedImages] = useState<Record<string, string>>({});
+  
+  // Upload status info
+  const [uploadIndex, setUploadIndex] = useState(0);
+  const [uploadProgress, setUploadProgress] = useState(0);
+
+  const [errorMsg, setErrorMsg] = useState<string | null>(null);
+  const [successMsg, setSuccessMsg] = useState<string | null>(null);
+  const [webcamActive, setWebcamActive] = useState(false);
+  
+  const videoRef = useRef<HTMLVideoElement | null>(null);
+  const canvasRef = useRef<HTMLCanvasElement | null>(null);
+  const streamRef = useRef<MediaStream | null>(null);
+  const countdownIntervalRef = useRef<NodeJS.Timeout | null>(null);
+
+  // 1. Load employee details & enrollment status
+  const fetchStatus = async () => {
+    if (!employeeId) return;
+    try {
+      const data = await fetchApi(`/enrollment/status/${employeeId}`);
+      setEmployeeName(data.name);
+      setEnrolledPoses(data.enrolled_poses || []);
+      if (data.is_complete) {
+        setCaptureState("done");
+      }
+    } catch (err: any) {
+      setErrorMsg(err.message || "Failed to load onboarding status.");
+    }
+  };
+
+  useEffect(() => {
+    if (employeeId) {
+      fetchStatus();
+    } else {
+      router.push("/");
+    }
+  }, [employeeId]);
+
+  // Audio & Speech synthesizers
+  const playSound = (type: "beep" | "click") => {
+    if (typeof window === "undefined") return;
+    try {
+      const audioCtx = new (window.AudioContext || (window as any).webkitAudioContext)();
+      const osc = audioCtx.createOscillator();
+      const gain = audioCtx.createGain();
+      osc.connect(gain);
+      gain.connect(audioCtx.destination);
+
+      if (type === "beep") {
+        osc.type = "sine";
+        osc.frequency.setValueAtTime(600, audioCtx.currentTime);
+        gain.gain.setValueAtTime(0.08, audioCtx.currentTime);
+        gain.gain.exponentialRampToValueAtTime(0.001, audioCtx.currentTime + 0.12);
+        osc.start();
+        osc.stop(audioCtx.currentTime + 0.13);
+      } else if (type === "click") {
+        osc.type = "triangle";
+        osc.frequency.setValueAtTime(100, audioCtx.currentTime);
+        osc.frequency.exponentialRampToValueAtTime(1000, audioCtx.currentTime + 0.08);
+        gain.gain.setValueAtTime(0.2, audioCtx.currentTime);
+        gain.gain.exponentialRampToValueAtTime(0.001, audioCtx.currentTime + 0.12);
+        osc.start();
+        osc.stop(audioCtx.currentTime + 0.12);
+      }
+    } catch (e) {
+      console.warn("Failed to generate audio feedback:", e);
+    }
+  };
+
+  const speakDirection = (text: string) => {
+    if (typeof window !== "undefined" && window.speechSynthesis) {
+      window.speechSynthesis.cancel();
+      const utterance = new SpeechSynthesisUtterance(text);
+      utterance.rate = 0.92;
+      utterance.pitch = 1.05;
+      
+      const voices = window.speechSynthesis.getVoices();
+      const eng = voices.find(v => v.lang.startsWith("en"));
+      if (eng) utterance.voice = eng;
+      
+      window.speechSynthesis.speak(utterance);
+    }
+  };
+
+  // Start webcam stream
+  const startWebcam = async () => {
+    setErrorMsg(null);
+    setSuccessMsg(null);
+    try {
+      if (streamRef.current) {
+        streamRef.current.getTracks().forEach(track => track.stop());
+      }
+      const stream = await navigator.mediaDevices.getUserMedia({
+        video: { width: 640, height: 480, facingMode: "user" }
+      });
+      streamRef.current = stream;
+      if (videoRef.current) {
+        videoRef.current.srcObject = stream;
+        await videoRef.current.play().catch(() => {});
+      }
+      setWebcamActive(true);
+    } catch {
+      setErrorMsg("Camera access denied. Please grant webcam permissions or upload files manually.");
+    }
+  };
+
+  const stopWebcam = () => {
+    if (countdownIntervalRef.current) {
+      clearInterval(countdownIntervalRef.current);
+      countdownIntervalRef.current = null;
+    }
+    streamRef.current?.getTracks().forEach(t => t.stop());
+    streamRef.current = null;
+    if (videoRef.current) videoRef.current.srcObject = null;
+    setWebcamActive(false);
+  };
+
+  useEffect(() => {
+    return () => stopWebcam();
+  }, []);
+
+  // Trigger auto capture session
+  const startAutoCapture = async () => {
+    setCapturedImages({});
+    setCurrentPoseIndex(0);
+    setCountdown(3);
+    setIsPaused(false);
+    setSingleRetakePose(null);
+    setCaptureState("capturing");
+    await startWebcam();
+  };
+
+  // Automated capture timer loop
+  useEffect(() => {
+    if (captureState !== "capturing" || isPaused || !webcamActive) return;
+
+    const currentKey = POSE_KEYS[currentPoseIndex];
+    if (!currentKey) {
+      stopWebcam();
+      setCaptureState("review");
+      return;
+    }
+
+    if (countdown === 3) {
+      speakDirection(POSES[currentKey].speech);
+    }
+
+    countdownIntervalRef.current = setInterval(() => {
+      if (countdown <= 1) {
+        if (countdownIntervalRef.current) {
+          clearInterval(countdownIntervalRef.current);
+          countdownIntervalRef.current = null;
+        }
+        captureFrame(currentKey);
+      } else {
+        playSound("beep");
+        setCountdown(countdown - 1);
+      }
+    }, 1000);
+
+    return () => {
+      if (countdownIntervalRef.current) clearInterval(countdownIntervalRef.current);
+    };
+  }, [captureState, currentPoseIndex, countdown, isPaused, webcamActive]);
+
+  // Capture frame
+  const captureFrame = (poseKey: string) => {
+    if (!videoRef.current || !canvasRef.current) return;
+    const video = videoRef.current;
+    const canvas = canvasRef.current;
+    const ctx = canvas.getContext("2d");
+    if (!ctx || video.readyState < 2) return;
+
+    canvas.width = 640;
+    canvas.height = 480;
+    
+    ctx.translate(canvas.width, 0);
+    ctx.scale(-1, 1);
+    ctx.drawImage(video, 0, 0, canvas.width, canvas.height);
+    ctx.setTransform(1, 0, 0, 1, 0, 0);
+
+    const base64 = canvas.toDataURL("image/jpeg", 0.90);
+    playSound("click");
+
+    setCapturedImages((prev) => ({ ...prev, [poseKey]: base64 }));
+
+    if (singleRetakePose) {
+      stopWebcam();
+      setSingleRetakePose(null);
+      setCaptureState("review");
+    } else {
+      setCurrentPoseIndex((prev) => prev + 1);
+      setCountdown(3);
+    }
+  };
+
+  const handleRetakeSingle = async (poseKey: string) => {
+    setSingleRetakePose(poseKey);
+    setCountdown(3);
+    setIsPaused(false);
+    setCaptureState("capturing");
+    
+    const index = POSE_KEYS.indexOf(poseKey);
+    setCurrentPoseIndex(index);
+    await startWebcam();
+  };
+
+  const dataURLtoBlob = (dataurl: string) => {
+    const arr = dataurl.split(",");
+    const mime = arr[0].match(/:(.*?);/)?.[1] || "image/jpeg";
+    const bstr = atob(arr[1]);
+    let n = bstr.length;
+    const u8arr = new Uint8Array(n);
+    while (n--) {
+      u8arr[n] = bstr.charCodeAt(n);
+    }
+    return new Blob([u8arr], { type: mime });
+  };
+
+  const saveBiometricProfile = async () => {
+    setCaptureState("saving");
+    setErrorMsg(null);
+    setUploadProgress(0);
+
+    const keysToUpload = POSE_KEYS;
+    let completedCount = 0;
+
+    for (let i = 0; i < keysToUpload.length; i++) {
+      const key = keysToUpload[i];
+      const base64 = capturedImages[key];
+      if (!base64) continue;
+
+      setUploadIndex(i + 1);
+
+      try {
+        const blob = dataURLtoBlob(base64);
+
+        const fd = new FormData();
+        fd.append("employee_id", employeeId as string);
+        fd.append("pose_type", key);
+        fd.append("file", blob, `${key}.jpg`);
+
+        await fetchApi("/auth/self-onboard/upload", { method: "POST", body: fd });
+        completedCount++;
+        setUploadProgress((completedCount / keysToUpload.length) * 100);
+      } catch (err: any) {
+        setErrorMsg(`Failed to save pose '${POSES[key].label}': ${err.message || "Network Error"}.`);
+        setCaptureState("review");
+        return;
+      }
+    }
+
+    await fetchStatus();
+    setCaptureState("done");
+  };
+
+  // Manual fallback file upload
+  const [selectedPose, setSelectedPose] = useState("front");
+  const handleFileChange = async (e: React.ChangeEvent<HTMLInputElement>) => {
+    const file = e.target.files?.[0];
+    if (!file) return;
+    
+    setErrorMsg(null);
+    setSuccessMsg(null);
+    
+    try {
+      const reader = new FileReader();
+      reader.onload = (event) => {
+        const base64 = event.target?.result as string;
+        setCapturedImages(prev => ({ ...prev, [selectedPose]: base64 }));
+        if (captureState === "idle") {
+          setCaptureState("review");
+        }
+      };
+      reader.readAsDataURL(file);
+    } catch (err: any) {
+      setErrorMsg(err.message || "Failed to process photo.");
+    }
+    e.target.value = "";
+  };
+
+  const enrolledCount = enrolledPoses.length;
+  const isProfileComplete = enrolledCount >= POSE_KEYS.length;
+
+  return (
+    <div className="min-h-screen bg-slate-950 text-white relative overflow-hidden flex flex-col justify-between">
+      <style>{`
+        @keyframes scanline {
+          0% { top: 0%; opacity: 0; }
+          5% { opacity: 1; }
+          95% { opacity: 1; }
+          100% { top: 100%; opacity: 0; }
+        }
+        @keyframes pulse-ring {
+          0% { transform: scale(0.92); opacity: 0.15; }
+          50% { transform: scale(1.08); opacity: 0.5; }
+          100% { transform: scale(0.92); opacity: 0.15; }
+        }
+        .scanner-line {
+          position: absolute;
+          left: 0;
+          right: 0;
+          height: 3px;
+          background: linear-gradient(to right, transparent, #22d3ee, transparent);
+          box-shadow: 0 0 12px #22d3ee, 0 0 24px #0891b2;
+          animation: scanline 3s linear infinite;
+          z-index: 10;
+          pointer-events: none;
+        }
+        .scanner-target {
+          position: absolute;
+          width: 65%;
+          height: auto;
+          aspect-ratio: 1 / 1;
+          max-width: 260px;
+          max-height: 260px;
+          border: 1px dashed rgba(34, 211, 238, 0.4);
+          border-radius: 50%;
+          animation: pulse-ring 2.5s ease-in-out infinite;
+          pointer-events: none;
+          display: flex;
+          align-items: center;
+          justify-content: center;
+        }
+        .hud-corner {
+          position: absolute;
+          width: 20px;
+          height: 20px;
+          border-color: #22d3ee;
+          border-width: 2px;
+          pointer-events: none;
+        }
+      `}</style>
+
+      {/* Background Gradients */}
+      <div className="absolute inset-0 bg-slate-950 pointer-events-none z-0" />
+      <div className="absolute top-1/4 left-1/4 w-[600px] h-[600px] bg-cyan-500/10 rounded-full blur-[130px] pointer-events-none z-0 animate-pulse" />
+      <div className="absolute bottom-1/4 right-1/4 w-[600px] h-[600px] bg-blue-500/10 rounded-full blur-[130px] pointer-events-none z-0 animate-pulse" />
+
+      {/* Header */}
+      <header className="w-full h-16 border-b border-slate-900 bg-slate-950/40 backdrop-blur-md px-6 flex items-center justify-between relative z-10">
+        <span className="text-sm font-extrabold tracking-tight text-white uppercase font-mono">NetraID Self-Onboarding</span>
+        <button
+          onClick={() => {
+            stopWebcam();
+            router.push("/");
+          }}
+          className="text-xs text-slate-400 hover:text-white flex items-center gap-1 transition-colors cursor-pointer"
+        >
+          <ChevronLeft className="w-4 h-4" /> Cancel Onboarding
+        </button>
+      </header>
+
+      {/* Main Content */}
+      <main className="flex-1 flex items-center justify-center p-6 relative z-10">
+        <canvas ref={canvasRef} className="hidden" />
+
+        {captureState === "done" ? (
+          /* SUCCESS VIEW */
+          <div className="w-full max-w-md bg-slate-900/40 border border-slate-800 backdrop-blur-2xl p-8 rounded-3xl text-center space-y-6 shadow-2xl animate-fadeInUp">
+            <div className="w-16 h-16 rounded-full bg-emerald-500/15 border border-emerald-500/30 flex items-center justify-center text-emerald-400 mx-auto animate-bounce">
+              <CheckCircle2 className="w-8 h-8" />
+            </div>
+            <div className="space-y-2">
+              <h2 className="text-xl font-black text-white">Profile Submitted!</h2>
+              <p className="text-slate-400 text-xs leading-relaxed font-light">
+                Hello <span className="font-bold text-cyan-400">{employeeName}</span>, your biometric enrollment is complete. Your account is now pending administrator review. Once approved, you can log in to your dashboard.
+              </p>
+            </div>
+            <button
+              onClick={() => router.push("/")}
+              className="w-full h-11 bg-white hover:bg-slate-100 text-slate-900 font-extrabold text-xs rounded-xl shadow-md transition-all cursor-pointer"
+            >
+              Return to Login Portal
+            </button>
+          </div>
+        ) : captureState === "idle" ? (
+          /* IDLE / STARTING SCREEN */
+          <div className="w-full max-w-5xl grid grid-cols-1 md:grid-cols-3 gap-8 items-start">
+            
+            {/* Checklist & instructions */}
+            <div className="bg-slate-900/40 border border-slate-850 backdrop-blur-xl rounded-2xl p-5 space-y-5">
+              <div>
+                <span className="text-[10px] font-extrabold tracking-widest text-cyan-400 uppercase">Step 2 of 2</span>
+                <h2 className="text-base font-black text-white mt-1">Biometric Scanner</h2>
+                <p className="text-[10.5px] text-slate-400 font-light mt-0.5 leading-relaxed">
+                  Welcome <span className="font-bold text-slate-200">{employeeName}</span>. Capture at least 10 face profiles to register your profile.
+                </p>
+              </div>
+
+              <div className="space-y-3.5">
+                <div className="flex items-center justify-between text-xs font-mono font-bold text-slate-400">
+                  <span>Database Status:</span>
+                  <span className={`inline-flex items-center gap-1.5 ${isProfileComplete ? "text-emerald-400" : "text-amber-400"}`}>
+                    <span className={`w-1.5 h-1.5 rounded-full ${isProfileComplete ? "bg-emerald-450 animate-pulse" : "bg-amber-400"}`} />
+                    {isProfileComplete ? "Complete" : "Incomplete"}
+                  </span>
+                </div>
+                
+                <div className="space-y-1.5">
+                  <div className="flex items-center justify-between text-xs font-mono font-bold text-slate-400">
+                    <span>Active Vectors:</span>
+                    <span>{enrolledCount} / {POSE_KEYS.length}</span>
+                  </div>
+                  <div className="w-full bg-slate-950 h-2 rounded-full overflow-hidden border border-slate-900">
+                    <div 
+                      className="bg-cyan-500 h-full rounded-full transition-all duration-500" 
+                      style={{ width: `${(enrolledCount / POSE_KEYS.length) * 100}%` }} 
+                    />
+                  </div>
+                </div>
+              </div>
+
+              <button
+                onClick={startAutoCapture}
+                className="w-full h-11 bg-white hover:bg-slate-100 text-slate-900 font-extrabold text-xs uppercase tracking-wider rounded-xl flex items-center justify-center gap-2.5 transition-all active:scale-95 cursor-pointer shadow-sm"
+              >
+                <Camera className="w-4 h-4 text-cyan-500 animate-pulse" />
+                Start Auto-Capture Session
+              </button>
+
+              {/* Upload Fallback File Option */}
+              <div className="border-t border-slate-900 pt-4 space-y-3">
+                <h4 className="text-[10px] font-black text-slate-400 uppercase tracking-wider">Manual Photo Upload</h4>
+                <div className="flex gap-2">
+                  <select
+                    value={selectedPose}
+                    onChange={(e) => setSelectedPose(e.target.value)}
+                    className="h-9.5 px-3 text-[11px] font-extrabold bg-slate-900 border border-slate-800 rounded-lg flex-1 outline-none text-slate-300 focus:border-cyan-500 cursor-pointer"
+                  >
+                    {POSE_KEYS.map((key) => (
+                      <option key={key} value={key} className="bg-slate-900">{POSES[key].label}</option>
+                    ))}
+                  </select>
+                  <label className="relative cursor-pointer shrink-0">
+                    <input
+                      type="file" accept="image/*"
+                      onChange={handleFileChange}
+                      className="absolute inset-0 w-full h-full opacity-0 cursor-pointer"
+                    />
+                    <div className="h-9.5 px-4 bg-slate-900 hover:bg-slate-850 text-white font-bold text-[11px] border border-slate-800 rounded-lg flex items-center gap-1.5 transition-all shadow-sm cursor-pointer active:scale-95">
+                      <Upload className="w-3.5 h-3.5" />
+                      Browse
+                    </div>
+                  </label>
+                </div>
+              </div>
+            </div>
+
+            {/* Checklist items list */}
+            <div className="md:col-span-2 bg-slate-900/40 border border-slate-850 backdrop-blur-xl rounded-2xl p-6 space-y-4">
+              <h3 className="text-xs font-black text-slate-300 uppercase tracking-wider">Facial Pose Checklist</h3>
+              
+              <div className="grid grid-cols-2 sm:grid-cols-5 gap-3.5 pt-2">
+                {POSE_KEYS.map((key) => {
+                  const done = enrolledPoses.includes(key);
+                  const Icon = POSES[key].icon;
+                  return (
+                    <div
+                      key={key}
+                      className={`p-4 flex flex-col items-center text-center justify-center transition-all duration-300 select-none cursor-default border rounded-2xl ${
+                        done
+                          ? "bg-emerald-950/20 border-emerald-500/30 text-emerald-400"
+                          : "bg-slate-900/20 border-slate-850 hover:border-slate-800"
+                      }`}
+                    >
+                      <div className={`w-9 h-9 rounded-xl flex items-center justify-center mb-2.5 transition-all ${
+                        done
+                          ? "bg-emerald-500/10 text-emerald-400 border border-emerald-500/25"
+                          : "bg-slate-950 border border-slate-850 text-slate-500"
+                      }`}>
+                        <Icon className="w-4.5 h-4.5" />
+                      </div>
+                      <span className={`text-[10px] font-bold uppercase tracking-wider font-mono ${done ? "text-emerald-400" : "text-slate-400"}`}>
+                        {POSES[key].label.replace(" Profile", "").replace(" Face", "").replace(" Option", "").replace(" Light", "")}
+                      </span>
+                      {done ? (
+                        <div className="flex items-center gap-1.5 mt-3 justify-center w-full">
+                          <CheckCircle2 className="w-4 h-4 text-emerald-400 shrink-0" />
+                        </div>
+                      ) : (
+                        <div className="w-4 h-4 rounded-full border-2 border-slate-800 mt-3 shrink-0 bg-slate-950" />
+                      )}
+                    </div>
+                  );
+                })}
+              </div>
+            </div>
+          </div>
+        ) : captureState === "capturing" ? (
+          /* AUTOMATIC CAMERA SCANNER HUD */
+          <div className="flex flex-col items-center space-y-5 w-full max-w-3xl">
+            {/* Pose directions banner */}
+            <div className="w-full bg-slate-900 text-white rounded-2xl p-5 border border-slate-800 flex items-center justify-between shadow-lg relative overflow-hidden">
+              <div className="absolute inset-0 bg-[radial-gradient(circle_at_center,rgba(6,182,212,0.15)_0%,transparent_70%)] pointer-events-none" />
+              <div className="flex items-center gap-4 relative z-10">
+                {(() => {
+                  const Icon = POSES[POSE_KEYS[currentPoseIndex]]?.icon;
+                  return (
+                    <div className="w-12 h-12 rounded-xl bg-white/10 flex items-center justify-center shrink-0 border border-white/10 text-cyan-400">
+                      {Icon && <Icon className="w-6 h-6" />}
+                    </div>
+                  );
+                })()}
+                <div>
+                  <p className="text-[10px] font-bold text-cyan-400 font-mono tracking-widest uppercase">
+                    SCAN PHASE {currentPoseIndex + 1} OF {POSE_KEYS.length}
+                  </p>
+                  <h2 className="text-lg font-black tracking-tight text-white mt-0.5">
+                    {POSES[POSE_KEYS[currentPoseIndex]]?.label}
+                  </h2>
+                  <p className="text-xs text-slate-300 font-medium mt-1">
+                    {POSES[POSE_KEYS[currentPoseIndex]]?.hint}
+                  </p>
+                </div>
+              </div>
+
+              {/* Countdown circle HUD */}
+              <div className="relative w-14 h-14 flex items-center justify-center shrink-0 border-2 border-white/10 rounded-full font-mono bg-white/5 shadow-inner">
+                <span className="text-2xl font-black text-cyan-400 animate-pulse">{countdown}</span>
+              </div>
+            </div>
+
+            {/* Video stream container with HUD overlay */}
+            <div className="relative aspect-[3/4] md:aspect-video w-full rounded-3xl overflow-hidden bg-black border border-slate-900 shadow-2xl">
+              <video
+                ref={videoRef}
+                className={`w-full h-full object-cover scale-x-[-1] transition-opacity duration-300 ${isPaused ? "opacity-25" : "opacity-100"}`}
+                autoPlay playsInline muted
+              />
+
+              {isPaused && (
+                <div className="absolute inset-0 flex flex-col items-center justify-center bg-black/40 backdrop-blur-sm z-20">
+                  <div className="w-16 h-16 rounded-2xl bg-white/10 border border-white/20 flex items-center justify-center shadow-lg text-white mb-3">
+                    <Pause className="w-8 h-8 fill-current text-cyan-400" />
+                  </div>
+                  <p className="text-[11px] font-bold text-cyan-400 font-mono tracking-widest uppercase">
+                    SYS.STATUS: SCAN_PAUSED
+                  </p>
+                </div>
+              )}
+
+              {/* Cybernetic HUD elements */}
+              {!isPaused && <div className="scanner-line" />}
+              {!isPaused && (
+                <div className="absolute inset-0 flex items-center justify-center pointer-events-none">
+                  <div className="scanner-target">
+                    <div className="w-4 h-4 border border-cyan-400 rounded-full animate-ping" />
+                  </div>
+                </div>
+              )}
+
+              {/* HUD corners */}
+              <div className="hud-corner corner-bracket-tl top-6 left-6 border-t-2 border-l-2" />
+              <div className="hud-corner corner-bracket-tr top-6 right-6 border-t-2 border-r-2" />
+              <div className="hud-corner corner-bracket-bl bottom-6 left-6 border-b-2 border-l-2" />
+              <div className="hud-corner corner-bracket-br bottom-6 right-6 border-b-2 border-r-2" />
+
+              {/* Scanner stats HUD */}
+              <div className="absolute top-6 left-12 right-12 flex justify-between text-[9px] font-mono font-bold text-cyan-400/80 pointer-events-none uppercase">
+                <span>SYS.STATUS: {isPaused ? "SCAN_PAUSED" : "ACQUIRING_DATA"}</span>
+                <span>FPS: {isPaused ? "0" : "60"} · ISO: 200 · SHUTTER: AUTO</span>
+              </div>
+
+              <div className="absolute bottom-6 left-12 right-12 flex justify-between items-center text-[9px] font-mono font-bold text-cyan-400/80 pointer-events-none">
+                <span>ANGLE: {POSE_KEYS[currentPoseIndex]?.toUpperCase()}</span>
+                <span>LIVENESS CHECK: ACTIVE</span>
+              </div>
+            </div>
+
+            {/* Controls */}
+            <div className="flex gap-4 w-full max-w-lg">
+              <button
+                onClick={async () => {
+                  if (isPaused) {
+                    setIsPaused(false);
+                    await startWebcam();
+                  } else {
+                    setIsPaused(true);
+                    stopWebcam();
+                  }
+                }}
+                className="flex-1 h-11 bg-white hover:bg-slate-50 text-slate-900 font-bold text-xs uppercase tracking-wider rounded-xl flex items-center justify-center gap-2 transition-all shadow-sm cursor-pointer"
+              >
+                {isPaused ? <Play className="w-3.5 h-3.5 fill-current" /> : <Pause className="w-3.5 h-3.5 fill-current" />}
+                {isPaused ? "Resume Scan" : "Pause Scan"}
+              </button>
+
+              <button
+                onClick={async () => {
+                  if (singleRetakePose) {
+                    stopWebcam();
+                    setSingleRetakePose(null);
+                    setCaptureState("review");
+                  } else {
+                    setCurrentPoseIndex(prev => prev + 1);
+                    setCountdown(3);
+                    if (isPaused) {
+                      setIsPaused(false);
+                      await startWebcam();
+                    }
+                  }
+                }}
+                className="flex-1 h-11 bg-slate-900 hover:bg-slate-855 border border-slate-800 text-white font-bold text-xs uppercase tracking-wider rounded-xl flex items-center justify-center gap-2 transition-all shadow-md cursor-pointer"
+              >
+                Skip Pose
+              </button>
+            </div>
+          </div>
+        ) : captureState === "review" ? (
+          /* REVIEW CAPTURES GRID */
+          <div className="space-y-6 w-full max-w-5xl">
+            <div className="bg-slate-900/40 border border-slate-850 rounded-2xl p-5 text-center max-w-2xl mx-auto space-y-2">
+              <Sparkles className="w-6 h-6 text-cyan-400 mx-auto animate-pulse" />
+              <h2 className="text-base font-black text-white tracking-tight">Scan Sequence Completed</h2>
+              <p className="text-xs text-slate-400 max-w-md mx-auto">
+                Review the 10 captured biometric pose frames. If any photo is blurry or dark, click the re-take icon. Once ready, click "Save Biometric Profile".
+              </p>
+            </div>
+
+            <div className="grid grid-cols-2 sm:grid-cols-5 gap-4">
+              {POSE_KEYS.map((key) => {
+                const imgUrl = capturedImages[key];
+                return (
+                  <div key={key} className="bg-slate-900/30 border border-slate-850 rounded-2xl p-3 shadow-xs relative flex flex-col group overflow-hidden">
+                    <div className="aspect-[4/3] rounded-xl bg-slate-955 overflow-hidden relative border border-slate-900">
+                      {imgUrl ? (
+                        <img src={imgUrl} alt={key} className="w-full h-full object-cover" />
+                      ) : (
+                        <div className="w-full h-full flex items-center justify-center text-[10px] text-slate-500 font-mono font-bold uppercase tracking-wider bg-slate-955">
+                          Missing
+                        </div>
+                      )}
+
+                      <div className="absolute inset-0 bg-slate-950/40 opacity-0 group-hover:opacity-100 transition-opacity flex items-center justify-center">
+                        <button
+                          onClick={() => handleRetakeSingle(key)}
+                          className="bg-white hover:bg-slate-100 text-slate-900 text-[10px] font-bold px-3 py-1.5 rounded-lg flex items-center gap-1.5 shadow-md cursor-pointer"
+                        >
+                          <RotateCcw className="w-3 h-3" />
+                          Re-take
+                        </button>
+                      </div>
+                    </div>
+
+                    <div className="mt-2.5 flex items-center justify-between text-[11px] font-bold">
+                      <span className="text-slate-350 uppercase font-mono">{POSES[key].label.replace(" Profile", "").replace(" Face", "").replace(" Option", "").replace(" Light", "")}</span>
+                      {imgUrl ? (
+                        <CheckCircle2 className="w-3.5 h-3.5 text-emerald-450" />
+                      ) : (
+                        <XCircle className="w-3.5 h-3.5 text-rose-500" />
+                      )}
+                    </div>
+                  </div>
+                );
+              })}
+            </div>
+
+            <div className="flex gap-4 max-w-md mx-auto pt-4">
+              <button
+                onClick={() => setCaptureState("idle")}
+                className="flex-1 h-11 border border-slate-800 hover:border-slate-700 bg-slate-900/50 text-slate-300 font-bold text-xs rounded-xl cursor-pointer"
+              >
+                Cancel
+              </button>
+              <button
+                onClick={saveBiometricProfile}
+                className="flex-1 h-11 bg-cyan-500 hover:bg-cyan-600 text-slate-950 font-extrabold text-xs rounded-xl shadow-md transition-all cursor-pointer flex items-center justify-center gap-1.5"
+              >
+                <CheckCircle2 className="w-4.5 h-4.5" />
+                Save Face Profile
+              </button>
+            </div>
+          </div>
+        ) : (
+          /* SAVING PROGRESS OVERLAY */
+          <div className="w-full max-w-md bg-slate-900/40 border border-slate-850 p-8 rounded-3xl text-center space-y-6 shadow-2xl">
+            <div className="relative w-16 h-16 mx-auto flex items-center justify-center">
+              <RefreshCw className="w-8 h-8 text-cyan-400 animate-spin" />
+            </div>
+            <div className="space-y-2">
+              <h3 className="text-base font-black text-white">Indexing Face Vectors</h3>
+              <p className="text-xs text-slate-400 font-mono">
+                Uploading Pose {uploadIndex} of {POSE_KEYS.length}
+              </p>
+              <div className="w-full bg-slate-950 h-2.5 rounded-full overflow-hidden border border-slate-900 mt-4">
+                <div 
+                  className="bg-cyan-500 h-full transition-all duration-300"
+                  style={{ width: `${uploadProgress}%` }}
+                />
+              </div>
+            </div>
+            <p className="text-[10px] text-slate-500 font-mono">
+              Running deep liveness check & feature alignment...
+            </p>
+          </div>
+        )}
+      </main>
+
+      <footer className="w-full h-12 border-t border-slate-900 bg-slate-950/20 px-6 flex items-center justify-center text-[10px] text-slate-500 font-medium relative z-10">
+        © {new Date().getFullYear()} NetraID Inc. All rights reserved.
+      </footer>
+    </div>
+  );
+}

frontend/app/tickets/page.tsx

@@ -3,11 +3,13 @@
 import React, { useState, useEffect, useRef } from "react";
 import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
 import SidebarLayout from "@/components/SidebarLayout";
-import { fetchApi, getUserProfile } from "@/app/utils/api";
+import { fetchApi, getUserProfile, getAccessToken, getBackendUrl } from "@/app/utils/api";
 import { useToast } from "@/app/utils/toast";
 import { 
-  MessageSquare, Plus, Send, CheckCircle, Clock, 
-  AlertTriangle, Filter, Search, ChevronRight, User, Loader2
+  MessageSquare, Plus, Send, CheckCircle2, Clock, 
+  AlertCircle, Filter, Search, ChevronRight, User, Loader2,
+  CheckCircle, Shield, Sparkles, Folder, RefreshCw, Lock, HelpCircle, 
+  Building2, Briefcase, FileText, Check, CheckCheck, Info, Paperclip, MoreVertical, X, ArrowLeft
 } from "lucide-react";
 
 export default function TicketsPage() {
@@ -18,20 +20,55 @@ export default function TicketsPage() {
   const [selectedTicket, setSelectedTicket] = useState<any>(null);
   const [replyText, setReplyText] = useState("");
   const [showAddModal, setShowAddModal] = useState(false);
+  const [isRefreshing, setIsRefreshing] = useState(false);
+
+  // Real-time Chat Connection & Presence States
+  const [sseConnected, setSseConnected] = useState(false);
+  const [presenceStatus, setPresenceStatus] = useState<"online" | "offline">("online");
+
+  // WhatsApp-style UI Enhancements States
+  const [isRightPanelOpen, setIsRightPanelOpen] = useState(false);
+  const [isTyping, setIsTyping] = useState(false);
+  const [chatSearchQuery, setChatSearchQuery] = useState("");
+  const [showChatSearch, setShowChatSearch] = useState(false);
+
+  const handleRefreshTickets = async () => {
+    setIsRefreshing(true);
+    try {
+      await queryClient.invalidateQueries({ queryKey: ["tickets"] });
+      await refetch();
+    } catch (e) {
+      console.error(e);
+    } finally {
+      setTimeout(() => setIsRefreshing(false), 800);
+    }
+  };
   
-  // New ticket form states
+  // Filtering & Search states
+  const [statusTab, setStatusTab] = useState<"ALL" | "UNRESOLVED" | "IN_PROGRESS" | "RESOLVED">("ALL");
+  const [selectedCategory, setSelectedCategory] = useState<string>("ALL");
+  const [selectedPriority, setSelectedPriority] = useState<string>("ALL");
+  const [searchQuery, setSearchQuery] = useState<string>("");
+
+  // Role-aware ticket creation states
+  const [orgName, setOrgName] = useState("");
   const [title, setTitle] = useState("");
-  const [category, setCategory] = useState("Payroll");
+  const [category, setCategory] = useState("System Bug / Error");
+  const [customCategory, setCustomCategory] = useState("");
   const [priority, setPriority] = useState("Medium");
   const [initialMessage, setInitialMessage] = useState("");
 
   const chatEndRef = useRef<HTMLDivElement>(null);
 
   useEffect(() => {
-    setProfile(getUserProfile());
+    const usr = getUserProfile();
+    setProfile(usr);
+    if (usr?.company?.name) {
+      setOrgName(usr.company.name);
+    }
   }, []);
 
-  const { data: tickets = [], isLoading } = useQuery({
+  const { data: tickets = [], isLoading, isRefetching, refetch } = useQuery({
     queryKey: ["tickets"],
     queryFn: async () => {
       return await fetchApi("/tickets/");
@@ -49,7 +86,6 @@ export default function TicketsPage() {
         })
       });
       
-      // Post the initial message if provided
       if (payload.message && payload.message.trim().length > 0) {
         await fetchApi(`/tickets/${ticket.id}/messages`, {
           method: "POST",
@@ -60,10 +96,11 @@ export default function TicketsPage() {
     },
     onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: ["tickets"] });
-      toast.success("Support ticket opened");
+      toast.success("Support ticket opened successfully");
       setShowAddModal(false);
       setTitle("");
       setInitialMessage("");
+      setCustomCategory("");
       setSelectedTicket(data);
     },
     onError: (err: any) => {
@@ -81,9 +118,13 @@ export default function TicketsPage() {
     onSuccess: () => {
       queryClient.invalidateQueries({ queryKey: ["tickets"] });
       setReplyText("");
+      setIsTyping(true);
+      setTimeout(() => {
+        setIsTyping(false);
+      }, 2500);
     },
     onError: (err: any) => {
-      toast.error(err.message || "Failed to send message");
+      toast.error(err.message || "Failed to send reply");
     }
   });
 
@@ -97,7 +138,7 @@ export default function TicketsPage() {
     onSuccess: (data) => {
       queryClient.invalidateQueries({ queryKey: ["tickets"] });
       setSelectedTicket(data);
-      toast.success(`Ticket status marked as ${data.status}`);
+      toast.success(`Ticket status updated to ${data.status}`);
     },
     onError: (err: any) => {
       toast.error(err.message || "Failed to update ticket status");
@@ -107,15 +148,70 @@ export default function TicketsPage() {
   // Keep chat scrolled to bottom
   useEffect(() => {
     chatEndRef.current?.scrollIntoView({ behavior: "smooth" });
-  }, [selectedTicket?.messages]);
+  }, [selectedTicket?.messages, isTyping]);
 
-  // Sync selected ticket details after query updates
+  // Sync selected ticket details after query updates - FIXED DEPENDENCY ARRAY SIZE CHANGES
   useEffect(() => {
     if (selectedTicket) {
       const updated = tickets.find((t: any) => t.id === selectedTicket.id);
       if (updated) setSelectedTicket(updated);
     }
-  }, [tickets, selectedTicket]);
+  }, [tickets, selectedTicket?.id]);
+
+  // Live SSE real-time messaging stream subscription
+  useEffect(() => {
+    if (!selectedTicket?.id) {
+      setSseConnected(false);
+      return;
+    }
+
+    const token = getAccessToken();
+    const backendUrl = getBackendUrl();
+    const streamUrl = `${backendUrl}/tickets/${selectedTicket.id}/stream?token=${token}`;
+
+    const eventSource = new EventSource(streamUrl);
+    setSseConnected(true);
+
+    eventSource.onopen = () => {
+      setSseConnected(true);
+    };
+
+    eventSource.onmessage = (event) => {
+      try {
+        setSseConnected(true);
+        const newMsg = JSON.parse(event.data);
+        setIsTyping(false);
+
+        setSelectedTicket((prev: any) => {
+          if (!prev || prev.id !== newMsg.ticket_id) return prev;
+          
+          const alreadyExists = prev.messages?.some((m: any) => m.id === newMsg.id);
+          if (alreadyExists) return prev;
+          
+          return {
+            ...prev,
+            messages: [...(prev.messages || []), newMsg]
+          };
+        });
+
+        // Trigger cache update
+        queryClient.invalidateQueries({ queryKey: ["tickets"] });
+      } catch (err) {
+        console.error("SSE message parse error:", err);
+      }
+    };
+
+    eventSource.onerror = (err) => {
+      console.error("SSE connection closed or error encountered:", err);
+      setSseConnected(false);
+      eventSource.close();
+    };
+
+    return () => {
+      eventSource.close();
+      setSseConnected(false);
+    };
+  }, [selectedTicket?.id]);
 
   const handleSendReply = (e: React.FormEvent) => {
     e.preventDefault();
@@ -126,265 +222,819 @@ export default function TicketsPage() {
   const handleCreateSubmit = (e: React.FormEvent) => {
     e.preventDefault();
     if (!title.trim() || !initialMessage.trim()) return;
-    createTicketMutation.mutate({ title, category, priority, message: initialMessage });
+
+    const finalCategory = category === "Other" && customCategory.trim() 
+      ? customCategory.trim() 
+      : category;
+
+    const formattedTitle = orgName.trim() 
+      ? `[${orgName.trim()}] ${title.trim()}` 
+      : title.trim();
+
+    createTicketMutation.mutate({ 
+      title: formattedTitle, 
+      category: finalCategory, 
+      priority, 
+      message: initialMessage 
+    });
   };
 
   const isHR = profile?.role?.name === "Admin" || profile?.role?.name === "HR" || profile?.role?.name === "Super Admin";
 
+  // Calculate ticket count metrics
+  const totalCount = tickets.length;
+  const unresolvedCount = tickets.filter((t: any) => t.status === "Open").length;
+  const inProgressCount = tickets.filter((t: any) => t.status === "In Progress").length;
+  const resolvedCount = tickets.filter((t: any) => t.status === "Closed").length;
+
+  // Filter tickets according to selected tab and criteria
+  const filteredTickets = tickets.filter((t: any) => {
+    // 1. Status Filter Tab
+    if (statusTab === "UNRESOLVED" && t.status !== "Open") return false;
+    if (statusTab === "IN_PROGRESS" && t.status !== "In Progress") return false;
+    if (statusTab === "RESOLVED" && t.status !== "Closed") return false;
+
+    // 2. Category Filter
+    if (selectedCategory !== "ALL" && t.category !== selectedCategory) return false;
+
+    // 3. Priority Filter
+    if (selectedPriority !== "ALL" && t.priority !== selectedPriority) return false;
+
+    // 4. Search Text Query
+    if (searchQuery.trim().length > 0) {
+      const q = searchQuery.toLowerCase();
+      const matchTitle = t.title?.toLowerCase().includes(q);
+      const matchCategory = t.category?.toLowerCase().includes(q);
+      const matchEmp = t.employee?.name?.toLowerCase().includes(q);
+      const matchId = t.id?.toString().includes(q);
+      if (!matchTitle && !matchCategory && !matchEmp && !matchId) return false;
+    }
+
+    return true;
+  });
+
+  // Filter individual messages within the active chat (WhatsApp Search Messages feature)
+  const filteredMessages = selectedTicket?.messages?.filter((m: any) => {
+    if (!chatSearchQuery.trim()) return true;
+    return m.message.toLowerCase().includes(chatSearchQuery.toLowerCase());
+  }) || [];
+
+  const getStatusBadge = (statusStr: string) => {
+    switch (statusStr) {
+      case "Closed":
+        return (
+          <span className="inline-flex items-center gap-1 text-[9px] font-bold px-2 py-0.5 rounded-full bg-emerald-50 text-emerald-700 dark:bg-emerald-950/50 dark:text-emerald-400 border border-emerald-200 dark:border-emerald-800/40">
+            <CheckCircle2 className="w-3 h-3 text-emerald-500" /> Resolved
+          </span>
+        );
+      case "In Progress":
+        return (
+          <span className="inline-flex items-center gap-1 text-[9px] font-bold px-2 py-0.5 rounded-full bg-amber-50 text-amber-700 dark:bg-amber-950/50 dark:text-amber-400 border border-amber-200 dark:border-amber-800/40">
+            <Clock className="w-3 h-3 text-amber-500 animate-pulse" /> In Progress
+          </span>
+        );
+      default:
+        return (
+          <span className="inline-flex items-center gap-1 text-[9px] font-bold px-2 py-0.5 rounded-full bg-sky-50 text-sky-700 dark:bg-sky-950/50 dark:text-sky-400 border border-sky-200 dark:border-sky-800/40">
+            <AlertCircle className="w-3 h-3 text-sky-500" /> Open
+          </span>
+        );
+    }
+  };
+
+  const getPriorityBadge = (priorityStr: string) => {
+    switch (priorityStr) {
+      case "High":
+        return (
+          <span className="text-[8px] font-bold px-1 py-0.5 rounded uppercase tracking-wider bg-rose-50 text-rose-600 dark:bg-rose-950/60 dark:text-rose-400 border border-rose-200 dark:border-rose-800/40">
+            High
+          </span>
+        );
+      case "Medium":
+        return (
+          <span className="text-[8px] font-bold px-1 py-0.5 rounded uppercase tracking-wider bg-amber-50 text-amber-600 dark:bg-amber-950/60 dark:text-amber-400 border border-amber-200 dark:border-amber-800/40">
+            Med
+          </span>
+        );
+      default:
+        return (
+          <span className="text-[8px] font-bold px-1 py-0.5 rounded uppercase tracking-wider bg-zinc-100 text-zinc-650 dark:bg-zinc-800 dark:text-zinc-400 border border-zinc-205 dark:border-zinc-700">
+            Low
+          </span>
+        );
+    }
+  };
+
+  const renderMessageTicks = (senderId: number) => {
+    const isMe = senderId === profile?.id;
+    if (!isMe) return null;
+
+    if (selectedTicket?.status === "Closed") {
+      return <CheckCheck className="w-3.5 h-3.5 text-sky-500 stroke-[2.5]" />;
+    } else if (selectedTicket?.status === "In Progress") {
+      return <CheckCheck className="w-3.5 h-3.5 text-zinc-400 dark:text-zinc-500 stroke-[2]" />;
+    } else {
+      return <Check className="w-3.5 h-3.5 text-zinc-400 stroke-[2]" />;
+    }
+  };
+
   return (
     <SidebarLayout>
-      <div className="h-[calc(100vh-6.5rem)] flex flex-col md:flex-row border border-slate-200 rounded-2xl overflow-hidden bg-white shadow-2xs">
+      <div className="space-y-4">
         
-        {/* Left pane: Tickets list */}
-        <div className="w-full md:w-80 border-r border-slate-200 flex flex-col shrink-0">
-          <div className="p-4 border-b border-slate-100 flex items-center justify-between">
-            <h1 className="text-sm font-extrabold text-slate-900 tracking-tight flex items-center gap-1.5">
-              <MessageSquare className="w-4 h-4 text-slate-700" />
-              Helpdesk Support
+        {/* Top Header Block & Overview Counters */}
+        <div className="flex flex-col sm:flex-row sm:items-center sm:justify-between gap-4 pb-2">
+          <div className="space-y-1">
+            <h1 className="text-xl font-extrabold text-zinc-900 dark:text-zinc-100 tracking-tight flex items-center gap-2">
+              <div className="p-2 rounded-xl bg-zinc-100 dark:bg-zinc-850 text-zinc-700 dark:text-zinc-300 border border-zinc-200 dark:border-zinc-800">
+                <MessageSquare className="w-5 h-5 text-cyan-500" />
+              </div>
+              Helpdesk & Support Desk
             </h1>
-            {!isHR && (
-              <button
-                onClick={() => setShowAddModal(true)}
-                className="p-1.5 bg-slate-900 hover:bg-slate-800 text-white rounded-lg cursor-pointer active:scale-95 transition-all"
-                title="Create Ticket"
-              >
-                <Plus className="w-3.5 h-3.5" />
-              </button>
-            )}
+            <p className="text-zinc-500 dark:text-zinc-400 text-xs">
+              Manage categorized support tickets, employee inquiries, and resolution workflows
+            </p>
           </div>
 
-          <div className="flex-1 overflow-y-auto p-2 space-y-1">
-            {isLoading ? (
-              Array.from({ length: 4 }).map((_, i) => (
-                <div key={i} className="p-3 border border-slate-50 rounded-xl animate-pulse space-y-2">
-                  <div className="h-3 w-28 bg-slate-100 rounded" />
-                  <div className="h-2 w-20 bg-slate-100 rounded" />
-                </div>
-              ))
-            ) : tickets.length > 0 ? (
-              tickets.map((t: any) => (
-                <button
-                  key={t.id}
-                  onClick={() => setSelectedTicket(t)}
-                  className={`w-full text-left p-3 rounded-xl border transition-all cursor-pointer flex flex-col gap-1.5 ${
-                    selectedTicket?.id === t.id
-                      ? "border-slate-300 bg-slate-50"
-                      : "border-transparent hover:bg-slate-50/50"
-                  }`}
-                >
-                  <div className="flex items-start justify-between w-full">
-                    <span className="text-[9px] font-bold uppercase tracking-wider text-slate-400">{t.category}</span>
-                    <span className={`text-[8px] font-bold px-1.5 py-0.5 rounded border ${
-                      t.priority === "High" 
-                        ? "bg-rose-50 border-rose-100 text-rose-600" 
-                        : t.priority === "Medium"
-                          ? "bg-amber-50 border-amber-100 text-amber-600"
-                          : "bg-slate-50 border-slate-150 text-slate-600"
-                    }`}>
-                      {t.priority}
-                    </span>
-                  </div>
-                  <div>
-                    <h3 className="text-xs font-bold text-slate-800 truncate">{t.title}</h3>
-                    {isHR && t.employee && (
-                      <p className="text-[10px] text-slate-450 mt-0.5">By: {t.employee.name}</p>
-                    )}
-                  </div>
-                  <div className="flex items-center gap-1.5 mt-1">
-                    <span className={`w-1.5 h-1.5 rounded-full ${
-                      t.status === "Closed" ? "bg-emerald-500" : t.status === "In Progress" ? "bg-amber-500" : "bg-blue-500"
-                    }`} />
-                    <span className="text-[9px] font-bold text-slate-450 uppercase">{t.status}</span>
-                  </div>
-                </button>
-              ))
-            ) : (
-              <div className="py-12 text-center text-slate-400 text-xs font-medium">
-                No support tickets found.
-              </div>
-            )}
+          <div className="flex items-center gap-2">
+            <button
+              onClick={handleRefreshTickets}
+              disabled={isRefreshing}
+              className="p-2 bg-zinc-100 dark:bg-zinc-800 hover:bg-zinc-200 dark:hover:bg-zinc-700 text-zinc-655 dark:text-zinc-300 rounded-xl cursor-pointer transition-all active:scale-95 disabled:opacity-70"
+              title="Refresh Tickets"
+            >
+              <RefreshCw 
+                className={`w-4 h-4 text-zinc-500 dark:text-zinc-400 inline-block ${isRefreshing ? "animate-spin" : ""}`} 
+              />
+            </button>
+            <button
+              onClick={() => setShowAddModal(true)}
+              className="px-4 py-2 bg-zinc-950 hover:bg-zinc-900 text-white dark:bg-zinc-100 dark:hover:bg-white dark:text-zinc-950 font-bold text-xs rounded-xl flex items-center gap-1.5 cursor-pointer active:scale-95 transition-all"
+            >
+              <Plus className="w-4 h-4 stroke-[2.5]" />
+              New Support Ticket
+            </button>
           </div>
         </div>
 
-        {/* Right pane: Message details */}
-        <div className="flex-1 flex flex-col bg-slate-50/50 h-full">
-          {selectedTicket ? (
-            <>
-              {/* Ticket header details */}
-              <div className="p-4 border-b border-slate-200 bg-white flex flex-col sm:flex-row sm:items-center sm:justify-between gap-3 shrink-0">
-                <div className="space-y-0.5">
-                  <span className="text-[9px] font-extrabold uppercase tracking-wider text-slate-400">{selectedTicket.category} Support Ticket</span>
-                  <h2 className="text-xs font-bold text-slate-900">{selectedTicket.title}</h2>
-                  {isHR && selectedTicket.employee && (
-                    <p className="text-[10px] text-slate-450">Submitted by: <strong className="text-slate-700">{selectedTicket.employee.name}</strong> ({selectedTicket.employee.email})</p>
-                  )}
+        {/* Categorization Counter Cards */}
+        <div className="grid grid-cols-2 lg:grid-cols-4 gap-3">
+          
+          <button
+            onClick={() => setStatusTab("ALL")}
+            className={`p-3.5 rounded-xl text-left cursor-pointer transition-none ${
+              statusTab === "ALL" 
+                ? "tech-card-3d-minimal font-extrabold" 
+                : "border border-zinc-200 dark:border-zinc-800 bg-white dark:bg-zinc-900"
+            }`}
+          >
+            <div className={`flex justify-between items-center mb-1 ${statusTab === "ALL" ? "text-zinc-900 dark:text-zinc-100 font-bold" : "text-zinc-400 dark:text-zinc-500"}`}>
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">All Tickets</span>
+              <Folder className="w-3.5 h-3.5" />
+            </div>
+            <p className={`text-2xl font-black tracking-tight ${statusTab === "ALL" ? "text-zinc-900 dark:text-zinc-100" : "text-zinc-650 dark:text-zinc-455"}`}>
+              {totalCount}
+            </p>
+          </button>
+
+          <button
+            onClick={() => setStatusTab("UNRESOLVED")}
+            className={`p-3.5 rounded-xl text-left cursor-pointer transition-none ${
+              statusTab === "UNRESOLVED" 
+                ? "tech-card-3d-minimal font-extrabold" 
+                : "border border-zinc-200 dark:border-zinc-800 bg-white dark:bg-zinc-900"
+            }`}
+          >
+            <div className={`flex justify-between items-center mb-1 ${statusTab === "UNRESOLVED" ? "text-zinc-900 dark:text-zinc-100 font-bold" : "text-zinc-400 dark:text-zinc-500"}`}>
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">Unresolved / Open</span>
+              <AlertCircle className="w-3.5 h-3.5" />
+            </div>
+            <p className={`text-2xl font-black tracking-tight ${statusTab === "UNRESOLVED" ? "text-zinc-900 dark:text-zinc-100" : "text-zinc-650 dark:text-zinc-455"}`}>
+              {unresolvedCount}
+            </p>
+          </button>
+
+          <button
+            onClick={() => setStatusTab("IN_PROGRESS")}
+            className={`p-3.5 rounded-xl text-left cursor-pointer transition-none ${
+              statusTab === "IN_PROGRESS" 
+                ? "tech-card-3d-minimal font-extrabold" 
+                : "border border-zinc-200 dark:border-zinc-800 bg-white dark:bg-zinc-900"
+            }`}
+          >
+            <div className={`flex justify-between items-center mb-1 ${statusTab === "IN_PROGRESS" ? "text-zinc-900 dark:text-zinc-100 font-bold" : "text-zinc-400 dark:text-zinc-500"}`}>
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">In Progress</span>
+              <Clock className="w-3.5 h-3.5" />
+            </div>
+            <p className={`text-2xl font-black tracking-tight ${statusTab === "IN_PROGRESS" ? "text-zinc-900 dark:text-zinc-100" : "text-zinc-650 dark:text-zinc-455"}`}>
+              {inProgressCount}
+            </p>
+          </button>
+
+          <button
+            onClick={() => setStatusTab("RESOLVED")}
+            className={`p-3.5 rounded-xl text-left cursor-pointer transition-none ${
+              statusTab === "RESOLVED" 
+                ? "tech-card-3d-minimal font-extrabold" 
+                : "border border-zinc-200 dark:border-zinc-800 bg-white dark:bg-zinc-900"
+            }`}
+          >
+            <div className={`flex justify-between items-center mb-1 ${statusTab === "RESOLVED" ? "text-zinc-900 dark:text-zinc-100 font-bold" : "text-zinc-400 dark:text-zinc-500"}`}>
+              <span className="text-[10px] font-extrabold uppercase tracking-wider">Resolved / Closed</span>
+              <CheckCircle2 className="w-3.5 h-3.5" />
+            </div>
+            <p className={`text-2xl font-black tracking-tight ${statusTab === "RESOLVED" ? "text-zinc-900 dark:text-zinc-100" : "text-zinc-650 dark:text-zinc-450"}`}>
+              {resolvedCount}
+            </p>
+          </button>
+
+        </div>
+
+        {/* Ticket Management Main Container - Split-pane view responsive control */}
+        <div className="h-[calc(100vh-14.5rem)] min-h-[500px] flex flex-col md:flex-row tech-card-3d-minimal overflow-hidden shadow-none">
+          
+          {/* Left Panel: Ticket Directory & Categorised List (Collapsible on mobile when chat is active) */}
+          <div className={`w-full md:w-80 border-r border-zinc-200 dark:border-zinc-800 flex flex-col shrink-0 bg-white dark:bg-zinc-900 ${
+            selectedTicket ? "hidden md:flex" : "flex"
+          }`}>
+            
+            {/* Filtering & Search Bar */}
+            <div className="p-3 border-b border-zinc-200 dark:border-zinc-800 space-y-2.5 bg-white dark:bg-zinc-900">
+              
+              {/* Text Search Input */}
+              <div className="relative">
+                <Search className="w-3.5 h-3.5 absolute left-3 top-3 text-zinc-400" />
+                <input
+                  type="text"
+                  placeholder="Search tickets, ID, employee..."
+                  value={searchQuery}
+                  onChange={(e) => setSearchQuery(e.target.value)}
+                  className="w-full h-9 pl-9 pr-3 text-xs bg-zinc-50 dark:bg-zinc-955 border border-zinc-200 dark:border-zinc-800 rounded-xl text-zinc-900 dark:text-zinc-100 focus:outline-none focus:border-cyan-500"
+                />
+              </div>
+
+              {/* Category & Priority Dropdowns */}
+              <div className="grid grid-cols-2 gap-2">
+                <select
+                  value={selectedCategory}
+                  onChange={(e) => setSelectedCategory(e.target.value)}
+                  className="h-8 text-[11px] font-semibold bg-zinc-50 dark:bg-zinc-950 border border-zinc-200 dark:border-zinc-800 rounded-xl px-2.5 text-zinc-850 dark:text-zinc-200 focus:outline-none focus:border-cyan-500 cursor-pointer"
+                >
+                  <option value="ALL">All Categories</option>
+                  <option value="Payroll">Payroll</option>
+                  <option value="Attendance">Attendance</option>
+                  <option value="IT Support">IT Support</option>
+                  <option value="Leave Requests">Leave Requests</option>
+                  <option value="General Queries">General Queries</option>
+                </select>
+
+                <select
+                  value={selectedPriority}
+                  onChange={(e) => setSelectedPriority(e.target.value)}
+                  className="h-8 text-[11px] font-semibold bg-zinc-50 dark:bg-zinc-950 border border-zinc-200 dark:border-zinc-800 rounded-xl px-2.5 text-zinc-850 dark:text-zinc-200 focus:outline-none focus:border-cyan-500 cursor-pointer"
+                >
+                  <option value="ALL">All Priorities</option>
+                  <option value="High">High Priority</option>
+                  <option value="Medium">Medium Priority</option>
+                  <option value="Low">Low Priority</option>
+                </select>
+              </div>
+
+            </div>
+
+            {/* List Feed - Renders as ultra compact sleek card list */}
+            <div className="flex-1 overflow-y-auto p-2 bg-zinc-50/10 dark:bg-zinc-955/5 space-y-1.5">
+              {isLoading ? (
+                Array.from({ length: 4 }).map((_, i) => (
+                  <div key={i} className="p-3 bg-white dark:bg-zinc-900 rounded-xl border border-zinc-100 dark:border-zinc-800 animate-pulse space-y-2">
+                    <div className="h-3 w-28 bg-zinc-200 dark:bg-zinc-800 rounded" />
+                    <div className="h-2 w-20 bg-zinc-100 dark:bg-zinc-800/60 rounded" />
+                  </div>
+                ))
+              ) : filteredTickets.length > 0 ? (
+                filteredTickets.map((t: any) => {
+                  const isSelected = selectedTicket?.id === t.id;
+                  return (
+                    <button
+                      key={t.id}
+                      onClick={() => setSelectedTicket(t)}
+                      className={`w-full text-left p-2.5 rounded-xl border transition-all cursor-pointer flex flex-col gap-1 relative overflow-hidden ${
+                        isSelected
+                          ? "bg-white dark:bg-zinc-900 border-cyan-500 shadow-sm ring-1 ring-cyan-500/20"
+                          : "bg-white dark:bg-zinc-900 border-zinc-250 dark:border-zinc-800/80 hover:border-zinc-300 dark:hover:border-zinc-700"
+                      }`}
+                    >
+                      {isSelected && (
+                        <div className="absolute left-0 top-0 bottom-0 w-1 bg-cyan-500" />
+                      )}
+
+                      <div className="flex items-center justify-between w-full text-[9px] font-mono">
+                        <span className="font-bold text-cyan-600 dark:text-cyan-400">
+                          #TK-{t.id}
+                        </span>
+                        <span className="text-zinc-400 font-bold uppercase tracking-wider scale-95 origin-right">{t.category}</span>
+                      </div>
+
+                      <div className="flex items-center justify-between gap-2">
+                        <h3 className="text-xs font-bold text-zinc-900 dark:text-zinc-100 truncate flex-1">
+                          {t.title}
+                        </h3>
+                        {getPriorityBadge(t.priority)}
+                      </div>
+
+                      <div className="flex items-center justify-between text-[9px] text-zinc-400 pt-1 border-t border-zinc-100/50 dark:border-zinc-800/20">
+                        <span className="flex items-center gap-1">
+                          <span className={`w-1.5 h-1.5 rounded-full ${t.status === "Closed" ? "bg-emerald-500" : t.status === "In Progress" ? "bg-amber-500 animate-pulse" : "bg-sky-500"}`} />
+                          <span>{t.status}</span>
+                        </span>
+                        <span>
+                          {t.created_at ? new Date(t.created_at).toLocaleDateString([], { month: 'short', day: 'numeric' }) : "Now"}
+                        </span>
+                      </div>
+                    </button>
+                  );
+                })
+              ) : (
+                <div className="py-16 text-center space-y-2 px-4">
+                  <HelpCircle className="w-8 h-8 mx-auto text-zinc-400 stroke-[1.5]" />
+                  <p className="text-xs font-bold text-zinc-655 dark:text-zinc-400">No support tickets found</p>
+                  <p className="text-[10px] text-zinc-405">Try adjusting your filters or open a new ticket</p>
                 </div>
+              )}
+            </div>
+
+          </div>
+
+          {/* Right Panel: Detailed Conversation & Ticket Thread (Always shown on desktop, shown on mobile only when active) */}
+          <div className={`flex-1 flex flex-col bg-white dark:bg-zinc-900 h-full overflow-hidden ${
+            selectedTicket ? "flex" : "hidden md:flex"
+          }`}>
+            {selectedTicket ? (
+              <div className="flex-1 flex h-full overflow-hidden">
                 
-                {/* HR Status updater action */}
-                {isHR ? (
-                  <div className="flex items-center gap-2">
-                    <span className="text-[10px] font-bold text-slate-400">STATUS:</span>
-                    <select
-                      value={selectedTicket.status}
-                      onChange={(e) => updateStatusMutation.mutate({ ticketId: selectedTicket.id, status: e.target.value })}
-                      className="text-[10px] font-bold h-7 border border-slate-200 rounded-lg bg-white px-2 text-slate-800"
-                    >
-                      <option value="Open">Open</option>
-                      <option value="In Progress">In Progress</option>
-                      <option value="Closed">Closed</option>
-                    </select>
+                {/* Chat Section */}
+                <div className="flex-1 flex flex-col h-full overflow-hidden border-r border-zinc-200 dark:border-zinc-800">
+                  
+                  {/* Selected Ticket Header */}
+                  <div className="p-3.5 border-b border-zinc-200 dark:border-zinc-800 bg-white dark:bg-zinc-900 flex flex-col sm:flex-row sm:items-center sm:justify-between gap-3 shrink-0">
+                    <div className="space-y-0.5">
+                      
+                      {/* Back button (always visible to allow deselecting / returning to list) */}
+                      <div className="flex items-center gap-2">
+                        <button 
+                          onClick={() => setSelectedTicket(null)}
+                          className="mr-1 p-1 hover:bg-zinc-150 dark:hover:bg-zinc-800 rounded-lg text-zinc-550 dark:text-zinc-450 cursor-pointer transition-transform active:scale-90"
+                          title="Close Chat / Go Back"
+                        >
+                          <ArrowLeft className="w-4 h-4 text-zinc-700 dark:text-zinc-300" />
+                        </button>
+
+                        <div className="flex items-center gap-2">
+                          <span className="text-[10px] font-mono font-bold text-cyan-600 dark:text-cyan-400 bg-cyan-50 dark:bg-cyan-950/60 px-2 py-0.5 rounded border border-cyan-200 dark:border-cyan-800/40">
+                            #TK-{selectedTicket.id}
+                          </span>
+                          <span className="text-[10px] font-bold uppercase tracking-wider text-zinc-450">
+                            {selectedTicket.category} Support
+                          </span>
+                          {getPriorityBadge(selectedTicket.priority)}
+                        </div>
+                      </div>
+                      
+                      <div className="flex items-center gap-2 pl-7">
+                        <h2 className="text-xs font-extrabold text-zinc-900 dark:text-zinc-100 truncate max-w-[200px] md:max-w-xs" title={selectedTicket.title}>
+                          {selectedTicket.title}
+                        </h2>
+                        <span className={`w-1.5 h-1.5 rounded-full ${sseConnected ? "bg-emerald-500 animate-pulse" : "bg-zinc-450"}`} />
+                      </div>
+                    </div>
+                    
+                    {/* Status & Options Action Strip */}
+                    <div className="flex items-center gap-2.5 self-end sm:self-auto pl-7">
+                      
+                      <button 
+                        onClick={() => {
+                          setShowChatSearch(!showChatSearch);
+                          if (showChatSearch) setChatSearchQuery("");
+                        }}
+                        className={`p-1.5 rounded-lg hover:bg-zinc-100 dark:hover:bg-zinc-800 transition-colors cursor-pointer ${showChatSearch ? "text-cyan-500 bg-cyan-500/10" : "text-zinc-500"}`}
+                        title="Search messages"
+                      >
+                        <Search className="w-4 h-4" />
+                      </button>
+
+                      <button 
+                        onClick={() => setIsRightPanelOpen(!isRightPanelOpen)}
+                        className={`p-1.5 rounded-lg hover:bg-zinc-100 dark:hover:bg-zinc-800 transition-colors cursor-pointer ${isRightPanelOpen ? "text-cyan-500 bg-cyan-500/10" : "text-zinc-500"}`}
+                        title="Ticket Details"
+                      >
+                        <Info className="w-4 h-4" />
+                      </button>
+
+                      <div className="flex items-center gap-2 bg-zinc-50 dark:bg-zinc-850 px-2 py-0.5 rounded-xl border border-zinc-200 dark:border-zinc-700/60">
+                        <span className="text-[10px] font-bold text-zinc-405 px-0.5 uppercase">Status:</span>
+                        {isHR ? (
+                          <select
+                            value={selectedTicket.status}
+                            onChange={(e) => updateStatusMutation.mutate({ ticketId: selectedTicket.id, status: e.target.value })}
+                            className="text-[10px] font-bold h-6.5 border border-zinc-300 dark:border-zinc-600 rounded-lg bg-white dark:bg-zinc-900 px-1 text-zinc-900 dark:text-zinc-100 focus:outline-none"
+                          >
+                            <option value="Open">Open</option>
+                            <option value="In Progress">In Progress</option>
+                            <option value="Closed">Resolved</option>
+                          </select>
+                        ) : (
+                          getStatusBadge(selectedTicket.status)
+                        )}
+                      </div>
+
+                    </div>
                   </div>
-                ) : (
-                  <span className={`text-[9px] font-mono font-bold px-2 py-0.5 border rounded-full ${
-                    selectedTicket.status === "Closed"
-                      ? "bg-emerald-50 border-emerald-150 text-emerald-700"
-                      : selectedTicket.status === "In Progress"
-                        ? "bg-amber-50 border-amber-150 text-amber-700"
-                        : "bg-blue-50 border-blue-150 text-blue-700"
-                  }`}>
-                    {selectedTicket.status}
-                  </span>
-                )}
-              </div>
 
-              {/* Chat Thread */}
-              <div className="flex-1 overflow-y-auto p-4 space-y-3.5">
-                {selectedTicket.messages && selectedTicket.messages.map((m: any) => {
-                  const isMe = m.sender_id === profile?.id;
-                  return (
-                    <div key={m.id} className={`flex items-start gap-2.5 max-w-[85%] ${isMe ? "ml-auto flex-row-reverse" : "mr-auto"}`}>
-                      <div className="w-7 h-7 rounded-full bg-slate-200 border border-slate-300 flex items-center justify-center text-slate-600 shrink-0">
-                        <User className="w-3.5 h-3.5" />
+                  {/* Inside-chat message text search bar */}
+                  {showChatSearch && (
+                    <div className="px-3.5 py-2 bg-zinc-50 dark:bg-zinc-850/50 border-b border-zinc-150 dark:border-zinc-800/80 flex items-center justify-between gap-2">
+                      <div className="relative flex-1">
+                        <Search className="w-3.5 h-3.5 absolute left-2.5 top-2.5 text-zinc-400" />
+                        <input
+                          type="text"
+                          placeholder="Search in this conversation..."
+                          value={chatSearchQuery}
+                          onChange={(e) => setChatSearchQuery(e.target.value)}
+                          className="w-full h-8 pl-8 pr-3 text-xs bg-white dark:bg-zinc-900 border border-zinc-200 dark:border-zinc-750 rounded-lg text-zinc-900 dark:text-zinc-100 focus:outline-none"
+                        />
                       </div>
-                      <div className="space-y-1">
-                        <div className={`p-3 rounded-2xl text-xs leading-relaxed ${
-                          isMe 
-                            ? "bg-slate-900 text-white rounded-tr-none" 
-                            : "bg-white border border-slate-200 text-slate-800 rounded-tl-none"
-                        }`}>
-                          <p>{m.message}</p>
+                      <button 
+                        onClick={() => {
+                          setShowChatSearch(false);
+                          setChatSearchQuery("");
+                        }}
+                        className="p-1 hover:bg-zinc-250 dark:hover:bg-zinc-700 rounded text-zinc-450"
+                      >
+                        <X className="w-4 h-4" />
+                      </button>
+                    </div>
+                  )}
+
+                  {/* Messages Chat Feed */}
+                  <div 
+                    className="flex-1 overflow-y-auto p-4 space-y-4 relative"
+                    style={{
+                      backgroundImage: `radial-gradient(var(--bg-elevated) 0.8px, transparent 0.8px)`,
+                      backgroundSize: '16px 16px',
+                    }}
+                  >
+                    
+                    <div className="p-3 rounded-xl bg-zinc-50 dark:bg-zinc-850/70 border border-zinc-200 dark:border-zinc-800 text-xs space-y-1">
+                      <div className="flex items-center justify-between text-zinc-500 dark:text-zinc-400 font-bold text-[10px]">
+                        <span>TICKET CREATED</span>
+                        <span>{selectedTicket.created_at ? new Date(selectedTicket.created_at).toLocaleString() : "Recently"}</span>
+                      </div>
+                      <p className="text-zinc-655 dark:text-zinc-355 text-[11px]">
+                        Support request registered under category <strong>{selectedTicket.category}</strong>. Real-time stream is active.
+                      </p>
+                    </div>
+
+                    {filteredMessages.map((m: any) => {
+                      const isMe = m.sender_id === profile?.id;
+                      return (
+                        <div key={m.id} className={`flex items-start gap-2 max-w-[80%] ${isMe ? "ml-auto flex-row-reverse" : "mr-auto"}`}>
+                          <div className={`w-7 h-7 rounded-full flex items-center justify-center text-[10px] font-bold shrink-0 border ${
+                            isMe 
+                              ? "bg-cyan-500 text-slate-950 border-cyan-400" 
+                              : "bg-zinc-850 text-white border-zinc-700"
+                          }`}>
+                            {isMe ? <User className="w-3.5 h-3.5" /> : <Shield className="w-3.5 h-3.5 text-cyan-400" />}
+                          </div>
+                          
+                          <div className="space-y-0.5">
+                            <div className={`p-3 rounded-2xl text-xs leading-relaxed border relative ${
+                              isMe 
+                                ? "bg-cyan-500/10 text-cyan-950 dark:bg-cyan-950/40 dark:text-cyan-300 border-cyan-200/60 dark:border-cyan-900/60 rounded-tr-none" 
+                                : "bg-slate-50 text-slate-900 dark:bg-zinc-900/90 dark:text-zinc-100 border-slate-200/80 dark:border-zinc-800/80 rounded-tl-none"
+                            }`}>
+                              <p className="whitespace-pre-wrap font-medium">{m.message}</p>
+                            </div>
+                            
+                            <div className={`flex items-center gap-1 mt-0.5 text-[8.5px] text-zinc-450 font-mono ${isMe ? "justify-end" : "justify-start"}`}>
+                              <span>{new Date(m.timestamp).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })}</span>
+                              {renderMessageTicks(m.sender_id)}
+                            </div>
+                          </div>
                         </div>
-                        <p className={`text-[8px] text-slate-400 font-mono ${isMe ? "text-right" : ""}`}>
-                          {new Date(m.timestamp).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' })}
+                      );
+                    })}
+
+                    {isTyping && (
+                      <div className="flex items-center gap-2 text-[10px] text-zinc-400 dark:text-zinc-500 font-bold ml-9">
+                        <div className="flex gap-0.5 items-center">
+                          <span className="w-1.5 h-1.5 bg-cyan-500 rounded-full animate-bounce" style={{ animationDelay: '0ms' }} />
+                          <span className="w-1.5 h-1.5 bg-cyan-500 rounded-full animate-bounce" style={{ animationDelay: '150ms' }} />
+                          <span className="w-1.5 h-1.5 bg-cyan-500 rounded-full animate-bounce" style={{ animationDelay: '300ms' }} />
+                        </div>
+                        <span>Support desk typing...</span>
+                      </div>
+                    )}
+
+                    <div ref={chatEndRef} />
+                  </div>
+
+                  {/* Reply Form & Presets */}
+                  {selectedTicket.status !== "Closed" ? (
+                    <div className="p-3 bg-white dark:bg-zinc-900 border-t border-zinc-200 dark:border-zinc-800 space-y-2 shrink-0">
+                      
+                      <div className="flex items-center gap-1.5 overflow-x-auto pb-1 no-scrollbar">
+                        <span className="text-[9.5px] font-bold text-zinc-405 uppercase tracking-wider shrink-0 flex items-center gap-1">
+                          <Sparkles className="w-3 h-3 text-cyan-500" /> Presets:
+                        </span>
+                        {(isHR ? [
+                          "We are reviewing your request.",
+                          "Issue has been resolved.",
+                          "Please provide attendance dates."
+                        ] : [
+                          "Thank you for the update.",
+                          "I have verified the logs.",
+                          "Please check my check-in record."
+                        ]).map((preset) => (
+                          <button
+                            key={preset}
+                            type="button"
+                            onClick={() => setReplyText(preset)}
+                            className="px-2.5 py-1 text-[10px] font-semibold bg-zinc-100 dark:bg-zinc-800 hover:bg-zinc-200 dark:hover:bg-zinc-700 text-zinc-700 dark:text-zinc-300 rounded-lg shrink-0 cursor-pointer transition-all border border-zinc-200 dark:border-zinc-700/60"
+                          >
+                            {preset}
+                          </button>
+                        ))}
+                      </div>
+
+                      <form onSubmit={handleSendReply} className="flex gap-2">
+                        <button
+                          type="button"
+                          onClick={() => {
+                            toast.info("Attachment uploading is available in Enterprise edition.");
+                          }}
+                          className="p-2.5 text-zinc-400 hover:text-cyan-500 hover:bg-zinc-100 dark:hover:bg-zinc-800 rounded-xl transition-colors border border-zinc-200 dark:border-zinc-750 cursor-pointer flex items-center justify-center shrink-0"
+                          title="Attach document/screenshot"
+                        >
+                          <Paperclip className="w-4 h-4" />
+                        </button>
+                        
+                        <input
+                          type="text"
+                          placeholder="Write support reply..."
+                          value={replyText}
+                          onChange={(e) => setReplyText(e.target.value)}
+                          className="flex-1 text-xs h-10 border border-zinc-200 dark:border-zinc-700/80 px-3.5 rounded-xl focus:outline-none focus:border-cyan-500 text-zinc-900 dark:text-zinc-100 bg-zinc-50 dark:bg-zinc-955"
+                        />
+                        <button
+                          type="submit"
+                          disabled={replyMutation.isPending || !replyText.trim()}
+                          className="h-10 px-5 bg-cyan-500 hover:bg-cyan-600 text-slate-950 font-extrabold text-xs rounded-xl flex items-center gap-1.5 active:scale-95 transition-all cursor-pointer disabled:opacity-50 shadow-xs"
+                        >
+                          {replyMutation.isPending ? <Loader2 className="w-4 h-4 animate-spin" /> : <Send className="w-4 h-4" />}
+                          Send
+                        </button>
+                      </form>
+
+                    </div>
+                  ) : (
+                    <div className="p-4 bg-emerald-500/10 border-t border-emerald-500/20 text-center text-xs font-bold text-emerald-600 dark:text-emerald-400 flex items-center justify-center gap-2 shrink-0">
+                      <Lock className="w-4 h-4" />
+                      This support ticket is resolved and marked as closed.
+                    </div>
+                  )}
+
+                </div>
+
+                {/* WhatsApp-style Contact Details Panel */}
+                {isRightPanelOpen && (
+                  <div className="w-64 bg-zinc-50 dark:bg-zinc-900/50 flex flex-col shrink-0 overflow-y-auto border-l border-zinc-200 dark:border-zinc-800 p-4 space-y-4">
+                    
+                    <div className="text-center pb-4 border-b border-zinc-200 dark:border-zinc-800 space-y-2">
+                      <div className="w-16 h-16 mx-auto rounded-full bg-cyan-500/10 text-cyan-500 border border-cyan-500/20 flex items-center justify-center text-2xl font-bold">
+                        {selectedTicket.employee?.name ? selectedTicket.employee.name.charAt(0).toUpperCase() : "#"}
+                      </div>
+                      <div>
+                        <h3 className="text-xs font-black text-zinc-900 dark:text-zinc-100">
+                          {selectedTicket.employee?.name || "Support Client"}
+                        </h3>
+                        <p className="text-[10px] text-zinc-405">
+                          {selectedTicket.employee?.email || "No email linked"}
                         </p>
                       </div>
                     </div>
-                  );
-                })}
-                <div ref={chatEndRef} />
-              </div>
 
-              {/* Reply Form */}
-              {selectedTicket.status !== "Closed" ? (
-                <form onSubmit={handleSendReply} className="p-3 bg-white border-t border-slate-200 flex gap-2 shrink-0">
-                  <input
-                    type="text"
-                    placeholder="Type support reply message..."
-                    value={replyText}
-                    onChange={(e) => setReplyText(e.target.value)}
-                    className="flex-1 text-xs h-9 border border-slate-200 px-3 rounded-xl focus:outline-none focus:border-cyan-400 text-slate-900 bg-white"
-                  />
-                  <button
-                    type="submit"
-                    disabled={replyMutation.isPending || !replyText.trim()}
-                    className="h-9 px-4 bg-slate-900 hover:bg-slate-800 text-white rounded-xl text-xs font-bold flex items-center gap-1 active:scale-95 transition-all cursor-pointer disabled:opacity-50"
-                  >
-                    {replyMutation.isPending ? <Loader2 className="w-3.5 h-3.5 animate-spin" /> : <Send className="w-3.5 h-3.5" />}
-                    Send
-                  </button>
-                </form>
-              ) : (
-                <div className="p-4 bg-slate-100 border-t border-slate-200 text-center text-[10px] text-slate-500 font-semibold uppercase tracking-wider shrink-0">
-                  🔒 This support ticket is closed and resolved.
+                    <div className="space-y-3.5 text-[11px]">
+                      
+                      <div>
+                        <span className="block text-[9px] font-bold text-zinc-405 uppercase tracking-wider mb-1">Ticket ID</span>
+                        <span className="font-mono text-zinc-800 dark:text-zinc-200 bg-zinc-200/50 dark:bg-zinc-800 px-2 py-0.5 rounded">
+                          #TK-{selectedTicket.id}
+                        </span>
+                      </div>
+
+                      <div>
+                        <span className="block text-[9px] font-bold text-zinc-405 uppercase tracking-wider mb-1">Issue Status</span>
+                        {getStatusBadge(selectedTicket.status)}
+                      </div>
+
+                      <div>
+                        <span className="block text-[9px] font-bold text-zinc-405 uppercase tracking-wider mb-1">Issue Category</span>
+                        <div className="flex items-center gap-1.5 text-zinc-700 dark:text-zinc-305 font-bold">
+                          <Folder className="w-3.5 h-3.5 text-zinc-450" />
+                          <span>{selectedTicket.category}</span>
+                        </div>
+                      </div>
+
+                      <div>
+                        <span className="block text-[9px] font-bold text-zinc-405 uppercase tracking-wider mb-1">Priority</span>
+                        {getPriorityBadge(selectedTicket.priority)}
+                      </div>
+
+                      <div>
+                        <span className="block text-[9px] font-bold text-zinc-405 uppercase tracking-wider mb-1">Date Created</span>
+                        <div className="flex items-center gap-1 text-zinc-500 font-medium">
+                          <Clock className="w-3.5 h-3.5 text-zinc-400" />
+                          <span>{selectedTicket.created_at ? new Date(selectedTicket.created_at).toLocaleString() : "Recently"}</span>
+                        </div>
+                      </div>
+
+                      {selectedTicket.employee?.company && (
+                        <div>
+                          <span className="block text-[9px] font-bold text-zinc-405 uppercase tracking-wider mb-1">Organization</span>
+                          <div className="flex items-center gap-1 text-zinc-650 dark:text-zinc-355 font-bold">
+                            <Building2 className="w-3.5 h-3.5 text-zinc-450" />
+                            <span>{selectedTicket.employee.company.name}</span>
+                          </div>
+                        </div>
+                      )}
+
+                    </div>
+
+                  </div>
+                )}
+
+              </div>
+            ) : (
+              <div className="flex-1 flex flex-col items-center justify-center text-zinc-400 gap-3 p-6 text-center bg-zinc-50/20 dark:bg-zinc-955/5">
+                <div className="w-16 h-16 rounded-2xl bg-zinc-100 dark:bg-zinc-800 flex items-center justify-center text-zinc-400 border border-zinc-200 dark:border-zinc-700">
+                  <MessageSquare className="w-8 h-8 text-cyan-500" />
                 </div>
-              )}
-            </>
-          ) : (
-            <div className="flex-1 flex flex-col items-center justify-center text-slate-400 gap-2 p-6">
-              <MessageSquare className="w-10 h-10 text-slate-300" />
-              <p className="text-xs font-medium">Select a ticket from the left panel to open chat support</p>
-            </div>
-          )}
+                <div className="space-y-1">
+                  <h3 className="text-sm font-bold text-zinc-750 dark:text-zinc-300">No Ticket Selected</h3>
+                  <p className="text-xs text-zinc-405 max-w-xs">
+                    Select a support ticket from the list to view conversation log and reply.
+                  </p>
+                </div>
+              </div>
+            )}
+          </div>
+
         </div>
+
       </div>
 
-      {/* Add modal */}
+      {/* Dynamic Role-Aware Support Ticket Modal */}
       {showAddModal && (
-        <div className="fixed inset-0 z-50 flex items-center justify-center bg-black/40 backdrop-blur-xs px-4">
-          <div className="bg-white border border-slate-200 rounded-2xl shadow-xl w-full max-w-md overflow-hidden animate-fadeInUp p-6 space-y-4">
-            <h2 className="text-sm font-bold text-slate-900 border-b border-slate-100 pb-3">Open Support Ticket</h2>
-            <form onSubmit={handleCreateSubmit} className="space-y-3">
+        <div className="fixed inset-0 z-50 flex items-center justify-center bg-black/65 backdrop-blur-xs px-4">
+          <div className="bg-white dark:bg-zinc-900 border border-zinc-200 dark:border-zinc-800 rounded-2xl shadow-2xl w-full max-w-lg overflow-hidden animate-fadeInUp p-6 space-y-4">
+            <div className="flex items-center justify-between border-b border-zinc-100 dark:border-zinc-800 pb-3">
+              <div>
+                <h2 className="text-sm font-bold text-zinc-900 dark:text-zinc-100 flex items-center gap-2">
+                  <MessageSquare className="w-4 h-4 text-cyan-500" />
+                  {isHR ? "Admin & Organization Ticket Portal" : "Submit Support Inquiry"}
+                </h2>
+                <p className="text-[10px] text-zinc-400 mt-0.5">
+                  {isHR ? "Raise system or organization level issues for platform support" : "Describe your grievance or inquiry for prompt resolution"}
+                </p>
+              </div>
+              <button
+                onClick={() => setShowAddModal(false)}
+                className="text-zinc-400 hover:text-zinc-650 dark:hover:text-zinc-200 text-xs font-bold p-1 cursor-pointer"
+              >
+                ✕
+              </button>
+            </div>
+
+            <form onSubmit={handleCreateSubmit} className="space-y-3.5">
+              
+              <div className="space-y-1">
+                <label className="text-[10px] font-bold text-zinc-405 uppercase tracking-wider flex items-center gap-1">
+                  <Building2 className="w-3 h-3 text-cyan-500" /> Organization / Company Name
+                </label>
+                <input
+                  type="text"
+                  placeholder="e.g. NetraID Global Corp (or Main HQ)"
+                  value={orgName}
+                  onChange={(e) => setOrgName(e.target.value)}
+                  className="w-full text-xs h-9 px-3 rounded-xl border border-zinc-200 dark:border-zinc-800 focus:outline-none focus:border-cyan-500 bg-zinc-50 dark:bg-zinc-955 text-zinc-900 dark:text-zinc-100 font-semibold"
+                />
+              </div>
+
               <div className="space-y-1">
-                <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider">Subject Title</label>
+                <label className="text-[10px] font-bold text-zinc-405 uppercase tracking-wider">
+                  Grievance Title / Problem Summary
+                </label>
                 <input
                   type="text"
                   required
-                  placeholder="e.g. Discrepancy in check-in logs"
+                  placeholder="e.g. Biometric verification latency on Kiosk #3"
                   value={title}
                   onChange={(e) => setTitle(e.target.value)}
-                  className="w-full text-xs h-9 px-3 rounded-lg border border-slate-200 focus:outline-none focus:border-cyan-400 bg-white text-slate-900"
+                  className="w-full text-xs h-9 px-3 rounded-xl border border-zinc-250 dark:border-zinc-800 focus:outline-none focus:border-cyan-500 bg-zinc-50 dark:bg-zinc-955 text-zinc-900 dark:text-zinc-100"
                 />
               </div>
+
               <div className="grid grid-cols-2 gap-3">
+                
                 <div className="space-y-1">
-                  <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider">Category</label>
+                  <label className="text-[10px] font-bold text-zinc-405 uppercase tracking-wider">
+                    Grievance Category
+                  </label>
                   <select
                     value={category}
                     onChange={(e) => setCategory(e.target.value)}
-                    className="w-full text-xs h-9 px-3 rounded-lg border border-slate-200 focus:outline-none focus:border-cyan-400 bg-white text-slate-900"
+                    className="w-full text-xs h-9 px-3 rounded-xl border border-zinc-200 dark:border-zinc-850 focus:outline-none focus:border-cyan-500 bg-zinc-50 dark:bg-zinc-955 text-zinc-900 dark:text-zinc-100 font-semibold cursor-pointer"
                   >
-                    <option value="Payroll">Payroll</option>
-                    <option value="Attendance">Attendance</option>
-                    <option value="IT Support">IT Support</option>
-                    <option value="Leave Requests">Leave Requests</option>
-                    <option value="General Queries">General Queries</option>
+                    <option value="Attendance Correction / Missed Punch">Attendance Correction / Missed Punch</option>
+                    <option value="Salary / Payroll Discrepancy">Salary / Payroll Discrepancy</option>
+                    <option value="Leave / Shift Schedule Issue">Leave / Shift Schedule Issue</option>
+                    <option value="Biometric Scan Failed">Biometric Scan Failed</option>
+                    <option value="App Bug / Technical Issue">App Bug / Technical Issue</option>
+                    <option value="Other">Other (Custom Grievance)</option>
                   </select>
                 </div>
+
                 <div className="space-y-1">
-                  <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider">Priority</label>
+                  <label className="text-[10px] font-bold text-zinc-405 uppercase tracking-wider">
+                    Priority Level
+                  </label>
                   <select
                     value={priority}
                     onChange={(e) => setPriority(e.target.value)}
-                    className="w-full text-xs h-9 px-3 rounded-lg border border-slate-200 focus:outline-none focus:border-cyan-400 bg-white text-slate-900"
+                    className="w-full text-xs h-9 px-3 rounded-xl border border-zinc-200 dark:border-zinc-850 focus:outline-none focus:border-cyan-500 bg-zinc-50 dark:bg-zinc-955 text-zinc-900 dark:text-zinc-100 font-semibold cursor-pointer"
                   >
-                    <option value="Low">Low</option>
-                    <option value="Medium">Medium</option>
-                    <option value="High">High</option>
+                    <option value="Low">Low Priority</option>
+                    <option value="Medium">Medium Priority</option>
+                    <option value="High">High Priority</option>
+                    <option value="Critical">Critical / Urgent</option>
                   </select>
                 </div>
+
               </div>
+
+              {category === "Other" && (
+                <div className="space-y-1 animate-fadeIn">
+                  <label className="text-[10px] font-bold text-amber-500 uppercase tracking-wider">
+                    Specify Custom Grievance Category
+                  </label>
+                  <input
+                    type="text"
+                    required
+                    placeholder="Describe specific grievance category..."
+                    value={customCategory}
+                    onChange={(e) => setCustomCategory(e.target.value)}
+                    className="w-full text-xs h-9 px-3 rounded-xl border border-amber-300 dark:border-amber-500/50 focus:outline-none focus:border-amber-505 bg-amber-500/5 text-zinc-900 dark:text-zinc-100"
+                  />
+                </div>
+              )}
+
               <div className="space-y-1">
-                <label className="text-[9.5px] font-bold text-slate-400 uppercase tracking-wider">Message Description</label>
+                <label className="text-[10px] font-bold text-zinc-405 uppercase tracking-wider">
+                  Detailed Grievance Description
+                </label>
                 <textarea
                   required
                   rows={4}
-                  placeholder="Describe your issue or query here..."
+                  placeholder="Provide full context, error codes, logs, or specific issues experienced..."
                   value={initialMessage}
                   onChange={(e) => setInitialMessage(e.target.value)}
-                  className="w-full text-xs p-3 rounded-lg border border-slate-200 focus:outline-none focus:border-cyan-400 bg-white text-slate-900 resize-none"
+                  className="w-full text-xs p-3 rounded-xl border border-zinc-200 dark:border-zinc-800 focus:outline-none focus:border-cyan-500 bg-zinc-50 dark:bg-zinc-955 text-zinc-900 dark:text-zinc-100 resize-none"
                 />
               </div>
-              <div className="flex items-center justify-end gap-2 pt-4 border-t border-slate-100">
+
+              <div className="flex items-center justify-end gap-2 pt-3 border-t border-zinc-100 dark:border-zinc-800">
                 <button
                   type="button"
                   onClick={() => setShowAddModal(false)}
-                  className="px-3.5 py-2 text-xs font-bold text-slate-500 hover:bg-slate-100 rounded-lg cursor-pointer"
+                  className="px-4 py-2 text-xs font-bold text-zinc-500 hover:bg-zinc-100 dark:hover:bg-zinc-800 rounded-xl cursor-pointer"
                 >
                   Cancel
                 </button>
                 <button
                   type="submit"
                   disabled={createTicketMutation.isPending}
-                  className="px-4 py-2 bg-slate-900 hover:bg-slate-800 text-white font-extrabold text-xs rounded-lg cursor-pointer flex items-center gap-1"
+                  className="px-5 py-2.5 bg-cyan-500 hover:bg-cyan-600 text-slate-950 font-extrabold text-xs rounded-xl cursor-pointer flex items-center gap-1.5 shadow-sm active:scale-95 transition-all"
                 >
-                  {createTicketMutation.isPending && <Loader2 className="w-3 h-3 animate-spin" />}
-                  Open Ticket
+                  {createTicketMutation.isPending && <Loader2 className="w-3.5 h-3.5 animate-spin" />}
+                  Submit Grievance Ticket
                 </button>
               </div>
+
             </form>
           </div>
         </div>
       )}
+
     </SidebarLayout>
   );
 }

frontend/app/utils/api.ts

@@ -127,7 +127,15 @@ export async function fetchApi(endpoint: string, options: RequestInit = {}): Pro
   
   if (!response.ok) {
     const errorData = await response.json().catch(() => ({ detail: "Unknown server error" }));
-    throw new Error(errorData.detail || "Server error occurred");
+    let errMsg = "Server error occurred";
+    if (typeof errorData.detail === "string") {
+      errMsg = errorData.detail;
+    } else if (Array.isArray(errorData.detail)) {
+      errMsg = errorData.detail.map((err: any) => `${err.loc[err.loc.length - 1] || "field"}: ${err.msg}`).join(", ");
+    } else if (errorData.detail && typeof errorData.detail === "object") {
+      errMsg = JSON.stringify(errorData.detail);
+    }
+    throw new Error(errMsg);
   }
   
   // Handle file responses (PDF, Excel, CSV)
@@ -141,7 +149,6 @@ export async function fetchApi(endpoint: string, options: RequestInit = {}): Pro
 
 export function parseDateTime(dateStr: string | null | undefined): Date | null {
   if (!dateStr) return null;
-  // Hugging Face backend stores datetimes in UTC. Append 'Z' to properly convert to the user's local timezone.
   const hasTimezone = dateStr.endsWith("Z") || dateStr.includes("+") || /-\d{2}:\d{2}$/.test(dateStr);
   const formattedStr = hasTimezone ? dateStr : dateStr.replace(" ", "T") + "Z";
   return new Date(formattedStr);

frontend/components/AttendanceHeatmap.tsx

@@ -89,7 +89,7 @@ export default function AttendanceHeatmap({ employeeId, title }: AttendanceHeatm
   });
 
   return (
-    <div className="bg-white border border-zinc-100 rounded-xl p-5 shadow-xs">
+    <div className="tech-card-3d p-5">
       <div className="flex items-center gap-2 mb-4 border-b border-zinc-50 pb-3">
         <Calendar className="w-4 h-4 text-slate-450" />
         <h3 className="text-[11px] font-bold text-slate-450 uppercase tracking-wider">

frontend/components/CommandPalette.tsx

@@ -0,0 +1,98 @@
+"use client";
+
+import React, { useState, useEffect } from "react";
+import { useRouter } from "next/navigation";
+import { 
+  Search, Calendar, Users, Building, Shield, 
+  MessageSquare, FileText, Settings, Sparkles, Sun, Moon 
+} from "lucide-react";
+
+export default function CommandPalette() {
+  const router = useRouter();
+  const [isOpen, setIsOpen] = useState(false);
+  const [query, setQuery] = useState("");
+
+  // Listen for Ctrl+K / Cmd+K
+  useEffect(() => {
+    const handleKeyDown = (e: KeyboardEvent) => {
+      if ((e.ctrlKey || e.metaKey) && e.key.toLowerCase() === "k") {
+        e.preventDefault();
+        setIsOpen(prev => !prev);
+      }
+      if (e.key === "Escape") {
+        setIsOpen(false);
+      }
+    };
+    window.addEventListener("keydown", handleKeyDown);
+    return () => window.removeEventListener("keydown", handleKeyDown);
+  }, []);
+
+  const items = [
+    { name: "Go to Dashboard",   icon: Sparkles,      action: () => router.push("/dashboard") },
+    { name: "Manage Organizations", icon: Building,  action: () => router.push("/tenants") },
+    { name: "Check Attendance Logs", icon: Calendar,  action: () => router.push("/attendance") },
+    { name: "View Employees",    icon: Users,         action: () => router.push("/employees") },
+    { name: "Helpdesk Support",  icon: MessageSquare, action: () => router.push("/tickets") },
+    { name: "Generate Reports",  icon: FileText,      action: () => router.push("/reports") },
+    { name: "System Settings",   icon: Settings,      action: () => router.push("/settings") },
+  ];
+
+  const filteredItems = items.filter(item => 
+    item.name.toLowerCase().includes(query.toLowerCase())
+  );
+
+  if (!isOpen) return null;
+
+  return (
+    <div className="fixed inset-0 z-[100] flex items-start justify-center bg-black/40 backdrop-blur-md pt-[15vh] px-4 animate-fadeIn">
+      <div className="w-full max-w-lg bg-white/95 border border-slate-200 shadow-2xl rounded-2xl overflow-hidden flex flex-col max-h-[60vh]">
+        
+        {/* Search bar */}
+        <div className="flex items-center px-4 py-3 border-b border-slate-100 shrink-0">
+          <Search className="w-4 h-4 text-slate-400 mr-2" />
+          <input
+            type="text"
+            placeholder="Type a command or search..."
+            value={query}
+            onChange={(e) => setQuery(e.target.value)}
+            className="flex-1 bg-transparent text-xs h-6 text-slate-800 focus:outline-none placeholder-slate-400"
+            autoFocus
+          />
+          <kbd className="hidden sm:inline-flex items-center gap-0.5 px-1.5 py-0.5 text-[9px] font-mono font-bold text-slate-400 bg-slate-100 border border-slate-200 rounded-md">
+            ESC
+          </kbd>
+        </div>
+
+        {/* Results */}
+        <div className="flex-1 overflow-y-auto p-2 space-y-1">
+          {filteredItems.length > 0 ? (
+            filteredItems.map((item, index) => {
+              const Icon = item.icon;
+              return (
+                <button
+                  key={index}
+                  onClick={() => { item.action(); setIsOpen(false); }}
+                  className="w-full text-left flex items-center gap-3 px-3 py-2.5 rounded-xl text-slate-700 hover:text-slate-900 hover:bg-slate-50 cursor-pointer transition-colors text-xs font-semibold"
+                >
+                  <Icon className="w-4 h-4 text-slate-400" />
+                  {item.name}
+                </button>
+              );
+            })
+          ) : (
+            <div className="py-8 text-center text-slate-400 text-xs font-semibold">
+              No matching commands or navigation routes found.
+            </div>
+          )}
+        </div>
+
+        {/* Footer info */}
+        <div className="p-3 border-t border-slate-100 bg-slate-50 flex items-center justify-between text-[9px] font-bold text-slate-400 uppercase tracking-wider shrink-0">
+          <span>Navigate using shortcuts</span>
+          <span>NetraID Enterprise Command Palette</span>
+        </div>
+
+      </div>
+    </div>
+  );
+}

frontend/components/SidebarLayout.tsx

@@ -19,20 +19,15 @@ import {
   Sun,
   Moon,
   Building2,
-  MessageSquare
+  MessageSquare,
+  User,
+  TrendingUp,
+  Calendar,
+  FileText,
+  Shield
 } from "lucide-react";
 import { getAccessToken, getUserProfile, clearTokens } from "@/app/utils/api";
-
-const navItems = [
-  { name: "Dashboard",       href: "/dashboard",  icon: LayoutDashboard },
-  { name: "Organizations",   href: "/tenants",    icon: Building2 },
-  { name: "Attendance",      href: "/attendance", icon: Clock },
-  { name: "Employees",       href: "/employees",  icon: Users },
-  { name: "Helpdesk Support",href: "/tickets",    icon: MessageSquare },
-  { name: "Reports",         href: "/reports",    icon: FileSpreadsheet },
-  { name: "Audit Logs",      href: "/audit",      icon: History },
-  { name: "Settings",        href: "/settings",   icon: Settings },
-];
+import CommandPalette from "@/components/CommandPalette";
 
 function NavLink({ 
   item, 
@@ -40,7 +35,7 @@ function NavLink({
   isCollapsed, 
   onClick 
 }: { 
-  item: typeof navItems[0], 
+  item: { name: string; href: string; icon: any }, 
   isActive: boolean, 
   isCollapsed: boolean, 
   onClick?: () => void 
@@ -51,20 +46,15 @@ function NavLink({
       href={item.href}
       onClick={onClick}
       data-tooltip={isCollapsed ? item.name : undefined}
-      className={`group relative flex items-center ${isCollapsed ? "justify-center px-2" : "gap-3 px-3"} py-2.5 rounded-xl transition-all duration-200 ${
+      className={`group relative flex items-center ${isCollapsed ? "justify-center px-2" : "gap-2.5 px-2.5 mx-1"} py-2.5 rounded-xl transition-all duration-200 ${
         isActive
-          ? "bg-[var(--border-subtle)] text-[var(--text-primary)] font-semibold"
+          ? "bg-zinc-950 text-white dark:bg-zinc-100 dark:text-zinc-950 font-bold"
           : "text-[var(--text-secondary)] hover:text-[var(--text-primary)] hover:bg-[var(--border-subtle)]"
       }`}
     >
-      {/* Active indicator */}
-      {isActive && (
-        <span className="absolute left-0 top-1/2 -translate-y-1/2 w-1 h-6 rounded-r-full bg-[var(--text-primary)]" />
-      )}
-
-      <div className={`w-8 h-8 rounded-lg flex items-center justify-center shrink-0 transition-all ${
+      <div className={`w-7.5 h-7.5 rounded-lg flex items-center justify-center shrink-0 transition-all ${
         isActive
-          ? "bg-[var(--text-primary)] text-[var(--bg-base)]"
+          ? "bg-zinc-800 text-white dark:bg-zinc-200 dark:text-zinc-900"
           : "bg-[var(--border-subtle)] text-[var(--text-muted)] group-hover:bg-[var(--border-strong)] group-hover:text-[var(--text-secondary)]"
       }`}>
         <Icon className="w-4 h-4" />
@@ -77,8 +67,6 @@ function NavLink({
           </p>
         </div>
       )}
-
-      {isActive && !isCollapsed && <ChevronRight className="w-3.5 h-3.5 text-[var(--text-muted)] shrink-0" />}
     </Link>
   );
 }
@@ -93,6 +81,20 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
 
   const [theme, setTheme] = useState<"light" | "dark">("light");
 
+  const [currentTime, setCurrentTime] = useState("");
+  const [currentDate, setCurrentDate] = useState("");
+
+  useEffect(() => {
+    const updateTime = () => {
+      const now = new Date();
+      setCurrentTime(now.toLocaleTimeString([], { hour: '2-digit', minute: '2-digit', second: '2-digit' }));
+      setCurrentDate(now.toLocaleDateString([], { weekday: 'long', year: 'numeric', month: 'long', day: 'numeric' }));
+    };
+    updateTime();
+    const interval = setInterval(updateTime, 1000);
+    return () => clearInterval(interval);
+  }, []);
+
   // Load theme and sidebar state from localStorage on client side
   useEffect(() => {
     const saved = localStorage.getItem("sidebar_collapsed");
@@ -141,14 +143,43 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
       setAuthorized(true);
       
        // Auto-redirect employees to dashboard if they attempt to access any admin views
-      if (profile?.role?.name === "Employee" && pathname !== "/dashboard" && pathname !== "/tickets") {
+      if (profile?.role?.name === "Employee" && pathname !== "/dashboard" && pathname !== "/tickets" && pathname !== "/profile" && pathname !== "/calendar") {
         router.push("/dashboard");
-      } else if (profile?.role?.name !== "Super Admin" && pathname === "/tenants") {
+      } else if (profile?.role?.name !== "Super Admin" && (pathname === "/tenants" || pathname === "/users" || pathname === "/analytics")) {
         router.push("/dashboard");
       }
     }
   }, [router, pathname]);
 
+  const [currentQuery, setCurrentQuery] = useState("");
+  useEffect(() => {
+    if (typeof window !== "undefined") {
+      const handleUpdate = () => {
+        setCurrentQuery(window.location.search);
+      };
+      handleUpdate();
+      const interval = setInterval(handleUpdate, 200);
+      return () => clearInterval(interval);
+    }
+  }, []);
+
+  const isLinkActive = (href: string) => {
+    if (href.includes("?")) {
+      const [linkPath, linkSearch] = href.split("?");
+      if (pathname !== linkPath) return false;
+      const linkParams = new URLSearchParams(linkSearch);
+      const currentParams = new URLSearchParams(currentQuery);
+      return linkParams.get("tab") === currentParams.get("tab");
+    } else {
+      if (href === "/dashboard") {
+        const currentParams = new URLSearchParams(currentQuery);
+        if (currentParams.has("tab")) return false;
+        return pathname === "/dashboard";
+      }
+      return pathname === href || pathname.startsWith(href + "/");
+    }
+  };
+
   if (!authorized) {
     return (
       <div className="min-h-screen bg-[var(--bg-base)] flex items-center justify-center">
@@ -171,14 +202,56 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
   const initials = user?.email ? user.email[0].toUpperCase() : "A";
   const isEmployee = user?.role?.name === "Employee";
   const isSuperAdmin = user?.role?.name === "Super Admin";
-  const visibleNavItems = isEmployee 
-    ? navItems.filter(item => item.href === "/dashboard" || item.href === "/tickets") 
-    : isSuperAdmin
-      ? navItems
-      : navItems.filter(item => item.href !== "/tenants");
+
+  const getVisibleNavItems = () => {
+    const role = user?.role?.name;
+    if (role === "Super Admin") {
+      return [
+        { name: "Dashboard",       href: "/dashboard",  icon: LayoutDashboard },
+        { name: "Organizations",   href: "/tenants",    icon: Building2 },
+        { name: "Analytics",       href: "/analytics",  icon: TrendingUp },
+        { name: "Helpdesk",        href: "/tickets",    icon: MessageSquare },
+        { name: "Audit Logs",      href: "/audit",      icon: History },
+        { name: "Settings",        href: "/settings",   icon: Settings },
+        { name: "Kiosk Mode",      href: "/kiosk",      icon: Scan },
+      ];
+    } else if (role === "Admin") {
+      return [
+        { name: "Dashboard",       href: "/dashboard",  icon: LayoutDashboard },
+        { name: "Attendance",      href: "/attendance", icon: Clock },
+        { name: "Employees",       href: "/employees",  icon: Users },
+        { name: "Leave",           href: "/leaves",     icon: Calendar },
+        { name: "Helpdesk",        href: "/tickets",    icon: MessageSquare },
+        { name: "Reports",         href: "/reports",    icon: FileSpreadsheet },
+        { name: "Settings",        href: "/settings",   icon: Settings },
+        { name: "Kiosk Mode",      href: "/kiosk",      icon: Scan },
+      ];
+    } else if (role === "HR") {
+      return [
+        { name: "Dashboard",       href: "/dashboard",  icon: LayoutDashboard },
+        { name: "Attendance",      href: "/attendance", icon: Clock },
+        { name: "Employees",       href: "/employees",  icon: Users },
+        { name: "Leave",           href: "/leaves",     icon: Calendar },
+        { name: "Helpdesk",        href: "/tickets",    icon: MessageSquare },
+        { name: "Reports",         href: "/reports",    icon: FileSpreadsheet },
+        { name: "Kiosk Mode",      href: "/kiosk",      icon: Scan },
+      ];
+    } else {
+      return [
+        { name: "Dashboard",       href: "/dashboard",  icon: LayoutDashboard },
+        { name: "Attendance",      href: "/dashboard?tab=attendance", icon: Clock },
+        { name: "Leave",           href: "/dashboard?tab=leave",      icon: Calendar },
+        { name: "Calendar",        href: "/calendar",                 icon: Calendar },
+        { name: "Contact HR",      href: "/tickets",                  icon: MessageSquare },
+      ];
+    }
+  };
+
+  const visibleNavItems = getVisibleNavItems();
 
   return (
     <div className="min-h-screen flex bg-[var(--bg-base)] text-[var(--text-primary)] font-sans relative">
+      <CommandPalette />
       {/* Ambient background */}
       <div className="ambient-bg" />
 
@@ -255,58 +328,28 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
           )}
 
           {/* Navigation */}
-          <nav className="flex-1 space-y-0.5">
+          <nav className="flex-1 space-y-4">
             {visibleNavItems.map((item) => (
               <NavLink
                 key={item.href}
                 item={item}
-                isActive={pathname === item.href || (item.href !== "/dashboard" && pathname.startsWith(item.href))}
+                isActive={isLinkActive(item.href)}
                 isCollapsed={isCollapsed}
               />
             ))}
-            
-            {!isEmployee && (
-              <>
-                {/* Separator */}
-                <div className="my-3 border-t border-[var(--border-subtle)]" />
-
-                {/* Kiosk Launch */}
-                <a
-                  href="/kiosk"
-                  target="_blank"
-                  rel="noopener noreferrer"
-                  data-tooltip={isCollapsed ? "Launch Kiosk" : undefined}
-                  className={`group flex items-center ${isCollapsed ? "justify-center px-2" : "gap-3 px-3"} py-2.5 rounded-xl text-[var(--text-secondary)] hover:text-[var(--text-primary)] hover:bg-[var(--border-subtle)] transition-all duration-200`}
-                >
-                  <div className="w-8 h-8 rounded-lg bg-[var(--border-subtle)] flex items-center justify-center group-hover:bg-[var(--text-primary)] transition-all">
-                    <Monitor className="w-4 h-4 text-[var(--text-secondary)] group-hover:text-[var(--bg-base)]" />
-                  </div>
-                  {!isCollapsed && (
-                    <>
-                      <div className="flex-1">
-                        <p className="text-sm">Launch Kiosk</p>
-                      </div>
-                      <span className="text-[9px] font-mono text-[var(--text-secondary)] bg-[var(--border-subtle)] px-1.5 py-0.5 rounded uppercase tracking-wider font-semibold">
-                        Live
-                      </span>
-                    </>
-                  )}
-                </a>
-              </>
-            )}
           </nav>
 
           {/* User Profile Footer */}
           <div className="pt-3 border-t border-[var(--border-subtle)]">
             <div className={`flex items-center ${isCollapsed ? "justify-center" : "gap-3"} p-2 rounded-xl hover:bg-[var(--border-subtle)] transition-all group cursor-default`}>
-              <div className="relative shrink-0">
-                <div className="w-8 h-8 rounded-full bg-[var(--text-primary)] flex items-center justify-center font-bold text-sm text-[var(--bg-base)] shadow-sm">
-                  {initials}
+              <Link href="/profile" className="flex items-center gap-3 flex-1 min-w-0">
+                <div className="relative shrink-0">
+                  <div className="w-8 h-8 rounded-full bg-[var(--text-primary)] flex items-center justify-center font-bold text-sm text-[var(--bg-base)] shadow-sm">
+                    {initials}
+                  </div>
+                  <div className="absolute -bottom-0.5 -right-0.5 w-2.5 h-2.5 rounded-full bg-emerald-500 border-2 border-white" />
                 </div>
-                <div className="absolute -bottom-0.5 -right-0.5 w-2.5 h-2.5 rounded-full bg-emerald-500 border-2 border-white" />
-              </div>
-              {!isCollapsed && (
-                <>
+                {!isCollapsed && (
                   <div className="flex-1 min-w-0">
                     <p className="text-xs font-semibold text-[var(--text-primary)] truncate leading-none">
                       {user?.role?.name || "Admin"}
@@ -315,19 +358,37 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
                       {user?.email}
                     </p>
                   </div>
+                )}
+              </Link>
+              {!isCollapsed && (
+                <div className="flex items-center gap-1 shrink-0">
+                  <Link
+                    href="/profile"
+                    title="View Profile"
+                    className="p-1.5 rounded-lg text-[var(--text-muted)] hover:text-[var(--text-primary)] hover:bg-[var(--border-subtle)] transition-all opacity-80 hover:opacity-100 cursor-pointer"
+                  >
+                    <User className="w-3.5 h-3.5" />
+                  </Link>
                   <button
                     onClick={handleLogout}
                     title="Sign out"
-                    className="p-1.5 rounded-lg text-[var(--text-muted)] hover:text-rose-600 hover:bg-rose-50 transition-all opacity-0 group-hover:opacity-100 cursor-pointer"
+                    className="p-1.5 rounded-lg text-[var(--text-muted)] hover:text-rose-600 hover:bg-rose-50 transition-all opacity-80 hover:opacity-100 cursor-pointer"
                   >
                     <LogOut className="w-3.5 h-3.5" />
                   </button>
-                </>
+                </div>
               )}
             </div>
             
             {isCollapsed && (
-              <div className="flex justify-center mt-2">
+              <div className="flex flex-col items-center gap-2 mt-2">
+                <Link
+                  href="/profile"
+                  title="View Profile"
+                  className="p-1.5 rounded-lg text-[var(--text-muted)] hover:text-[var(--text-primary)] hover:bg-[var(--border-subtle)] transition-all cursor-pointer"
+                >
+                  <User className="w-4 h-4" />
+                </Link>
                 <button
                   onClick={handleLogout}
                   title="Sign out"
@@ -358,6 +419,11 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
             </svg>
           </div>
           <span className="font-extrabold text-[17px] text-[var(--text-primary)] tracking-tight">NetraID</span>
+          {currentTime && (
+            <span className="text-[10px] font-mono bg-[var(--border-subtle)] px-2 py-0.5 rounded-lg text-[var(--text-secondary)] tabular-nums font-semibold">
+              {currentTime.split(" ")[0]} {currentTime.split(" ")[1] || ""}
+            </span>
+          )}
         </div>
         <div className="flex items-center gap-2">
           {/* Theme Toggle Mobile */}
@@ -410,45 +476,34 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
             </button>
           </div>
 
-          <nav className="flex-1 overflow-y-auto space-y-1 p-4">
+          <nav className="flex-1 overflow-y-auto space-y-4 p-4">
             <div className="mb-2 px-3 text-[10px] font-bold tracking-widest text-[var(--text-muted)] uppercase">Menu</div>
             {visibleNavItems.map((item) => (
               <NavLink
                 key={item.href}
                 item={item}
-                isActive={pathname === item.href || (item.href !== "/dashboard" && pathname.startsWith(item.href))}
+                isActive={isLinkActive(item.href)}
                 isCollapsed={false}
                 onClick={() => setSidebarOpen(false)}
               />
             ))}
             
-            {!isEmployee && (
-              <>
-                <div className="mt-6 mb-2 px-3 text-[10px] font-bold tracking-widest text-[var(--text-muted)] uppercase">System</div>
-                <a
-                  href="/kiosk"
-                  target="_blank"
-                  rel="noopener noreferrer"
-                  className="flex items-center gap-3 px-3 py-3 rounded-xl text-[var(--text-secondary)] hover:text-white hover:bg-slate-800 transition-all border border-transparent hover:border-slate-700 shadow-sm"
-                >
-                  <div className="w-8 h-8 rounded-lg bg-slate-800 flex items-center justify-center">
-                    <Monitor className="w-4 h-4 text-cyan-400" />
-                  </div>
-                  <span className="text-sm font-medium">Launch Kiosk</span>
-                </a>
-              </>
-            )}
           </nav>
 
           <div className="p-4 border-t border-[var(--border-subtle)] bg-[var(--bg-surface)]">
             <div className="flex items-center gap-3 p-3 rounded-xl bg-[var(--border-subtle)]/50 border border-[var(--border-subtle)]">
-              <div className="w-9 h-9 rounded-full bg-[var(--text-primary)] flex items-center justify-center font-bold text-sm text-[var(--bg-base)] shadow-md">
-                {initials}
-              </div>
-              <div className="flex-1 min-w-0">
-                <p className="text-xs font-bold text-[var(--text-primary)] truncate">{user?.role?.name}</p>
-                <p className="text-[10px] text-[var(--text-muted)] truncate">{user?.email}</p>
-              </div>
+              <Link href="/profile" onClick={() => setSidebarOpen(false)} className="flex items-center gap-3 flex-1 min-w-0">
+                <div className="w-9 h-9 rounded-full bg-[var(--text-primary)] flex items-center justify-center font-bold text-sm text-[var(--bg-base)] shadow-md">
+                  {initials}
+                </div>
+                <div className="flex-1 min-w-0">
+                  <p className="text-xs font-bold text-[var(--text-primary)] truncate">{user?.role?.name}</p>
+                  <p className="text-[10px] text-[var(--text-muted)] truncate">{user?.email}</p>
+                </div>
+              </Link>
+              <Link href="/profile" onClick={() => setSidebarOpen(false)} className="p-2 rounded-lg text-[var(--text-muted)] hover:text-[var(--text-primary)] cursor-pointer transition-all">
+                <User className="w-4 h-4" />
+              </Link>
               <button onClick={handleLogout} className="p-2 rounded-lg text-[var(--text-muted)] hover:text-rose-500 hover:bg-rose-500/10 cursor-pointer transition-all">
                 <LogOut className="w-4 h-4" />
               </button>
@@ -460,8 +515,21 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
       {/* ─── Main Content ─── */}
       <main className="flex-1 min-h-screen overflow-y-auto relative z-10 pt-14 md:pt-0">
         {/* Desktop Top Navbar */}
-        <header className="hidden md:flex h-14 border-b border-[var(--border-subtle)] px-8 items-center justify-end bg-[var(--bg-surface)]/95 backdrop-blur-xl sticky top-0 z-30">
-          <div className="flex items-center gap-2">
+        <header className="hidden md:flex h-14 border-b border-[var(--border-subtle)] px-8 items-center justify-between bg-[var(--bg-surface)]/95 backdrop-blur-xl sticky top-0 z-30">
+          <div className="flex-1" />
+          
+          <div className="flex items-center gap-6">
+            <div className="flex items-center gap-2 font-mono text-[12px] text-[var(--text-secondary)] font-medium">
+              <Clock className="w-4 h-4 text-cyan-500 animate-pulse" />
+              <span>{currentDate}</span>
+              {currentTime && (
+                <>
+                  <span className="text-[var(--border-subtle)] px-1">|</span>
+                  <span className="tabular-nums font-bold text-[var(--text-primary)]">{currentTime}</span>
+                </>
+              )}
+            </div>
+
             <button
               onClick={toggleTheme}
               className="p-2 rounded-lg hover:bg-[var(--border-subtle)] text-[var(--text-muted)] hover:text-[var(--text-primary)] transition-all cursor-pointer"
@@ -472,7 +540,10 @@ export default function SidebarLayout({ children }: { children: React.ReactNode
           </div>
         </header>
 
-        <div className="max-w-7xl mx-auto px-5 py-6 md:px-8 md:py-8">
+        <div 
+          key={pathname}
+          className="max-w-7xl mx-auto px-5 py-6 md:px-8 md:py-8 page-enter"
+        >
           {children}
         </div>
       </main>

frontend/next.config.js

@@ -1,3 +1,5 @@
+const path = require('path');
+
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   reactStrictMode: true,
@@ -7,6 +9,8 @@ const nextConfig = {
   typescript: {
     ignoreBuildErrors: true,
   },
+  outputFileTracingRoot: __dirname,
 };
 
 module.exports = nextConfig;
+