Peoplevate v1.0.0

Release 1.0.0

Summary

Peoplevate is a self-hosted Employee Lifecycle Management System (ELMS),
covering the entire employee journey — from recruitment and onboarding through
attendance & leave, performance management, and offboarding — backed by a hardened
security model and full GDPR compliance.

Major Features:

• Full lifecycle coverage — Recruitment, onboarding, attendance & leave, performance
  evaluation, and offboarding are delivered as end-to-end, workflow-enabled modules.
• Enterprise-grade security — argon2id password hashing, JWT with refresh-token
  rotation, account lockout, AES-256-GCM field-level encryption, and versioned key
  management are built in from day one.
• GDPR-ready by default — Data subject rights, retention policies, breach notification,
  consent evidence, anomaly detection, and audit logging satisfy the compliance gaps
  identified in the v1.0 Deployment Readiness Assessment.
• Four-tier RBAC — A capability-based permission matrix is enforced consistently on
  both the API and the frontend, scoping admin, HR, manager, and employee access.
• Modern, accessible UI — A React 19 + Tailwind v4 interface built on Radix UI with a
  responsive, role-aware navigation and a comprehensive self-service area.
• Docker Self-Hosting — a full docker compose stack (PostgreSQL + backend + frontend
  via Nginx) for one-command self-hosting, with persistent volumes, health checks, and
  automatic migrations on startup.

Added

Core Platform & Auth

• New Express 5 + Prisma 7 backend with a layered routes → services → config architecture
  and ESM/TypeScript strict mode.
• Monorepo scaffolding with backend, frontend, and shared config workspaces via pnpm.
• Developer tooling baseline: ESLint flat config, Prettier, Vitest, and CI workflow.
• JSON Web Token authentication with 15-minute access tokens and 7-day rotating refresh
  tokens, including reuse detection via token families.
• Refresh tokens hashed at rest and rotated on every refresh.
• Account lockout after 5 failed attempts (15-minute cooldown) with login rate limiting.
• Password lifecycle: secure login, logout, forgot-password, reset-password, first-time
  setup, and change-password flows.
• Zod-validated environment configuration that fails fast on invalid settings.
• Graceful server shutdown and node-cron scheduled job lifecycle management.

Organization & Employee Data

• Hierarchical department structure and per-department position management.
• Employee master data with unique employee numbers, encrypted PII, and salary storage.
• Employment change tracking (promotion, transfer, manager change, salary adjustment,
  status change) with before/after value history.
• Employment type and lifecycle status support (new hire, probation, active, on leave,
  terminated) with soft-delete via deleted_at.

Recruitment & Onboarding

• Job requisition workflow (draft → pending approval → approved → published → closed).
• Candidate pipeline tracking (applied → screening → interview → offer → hired/rejected).
• Interview scheduling and offer letter generation.
• Onboarding task management (document submission, equipment assignment, orientation,
  system access setup).

Attendance & Leave

• Attendance clock in/out records with IP capture and configurable grace minutes.
• Leave types, entitlements, policy groups, and annual balance accrual.
• Multi-step leave approval workflow (manager → HR → approved) with balance validation.
• Public holiday calendar management.

Performance Management

• Evaluation cycles (probation, mid-year, end-year) with automated probation setup.
• Multi-phase review workflow (self → manager → HR → completed) with optional rebuttal.

Offboarding

• Offboarding records for resignation, dismissal, and end of contract.
• Clearance checklist with category-based items.
• Exit interview capture and final settlement management.

Documents

• Typed document management (contract, national ID, passport, etc.) with expiry tracking.
• AES-256-GCM encryption at rest for files and sensitive fields, with versioned key support
  and legacy SHA-256 decryption fallback.
• Automated expiry alerts with severity classification.

Security, RBAC & Audit

• Four-role capability matrix (admin, HR manager, manager, employee) enforced via middleware
  and protected frontend routes.
• Comprehensive audit logging for every mutation plus sensitive reads, downloads, and exports.
• Helmet security headers (CSP/HSTS), CORS, and request body limits.
• Anomaly detection for failed-login and bulk-download spikes.

GDPR & Compliance

• Data subject access rights (access, erasure, portability, rectification) with a queue and
  SLA tracking.
• Retention policies across eight data categories with hard-delete and anonymize actions,
  plus legal hold support.
• Breach notification workflow with 72-hour supervisory authority deadline tracking.
• Consent management with evidence records and withdrawal links.
• IP data minimization (truncation) and configurable retention.
• Scheduled jobs for retention purge, IP minimization, DSAR SLA checks, and breach
  escalation.

Frontend & UI

• New React 19 + Vite SPA with Tailwind v4 and Radix UI primitives.
• Role-aware routing with lazy-loaded pages, error boundaries, and Suspense.
• Pages for dashboard, organization, employees, recruitment, attendance & leave,
  performance, offboarding, audit log, and compliance management.
• Self-service profile, my-data (GDPR), and account settings pages.
• Automatic token refresh on 401 with a centralized session-expired handler.
• Mock mode with visible banner and MSW-based network interception for development.

Docker Deployment

• docker-compose.yml for a single-host self-hosted stack (PostgreSQL 18, backend, frontend
  served by Nginx with /api reverse proxy).
• Multi-stage Dockerfiles for both apps (non-root runtime user, minimal Alpine/Nginx images).
• .env.docker.example template with all required secrets (JWT, field encryption, DB password).
• Automatic prisma migrate deploy on backend start, persistent named volumes for the database
  and uploaded documents, and health checks for every service.
• Full operating guide (configure, build, verify, back up, upgrade, harden) in
  docs/deployment.md.

Security

• Plaintext passwords, salaries, and national IDs are never logged or stored.
• JWT secrets and encryption keys are environment-only and enforced to be ≥ 32 characters.
• No source maps shipped in production unless explicitly enabled via VITE_SOURCEMAP.