Staff App + Time-Clock (PL-T195)

Staff log in to the mobile app and land on my-shifts — upcoming, today, and past shifts in a thumb-friendly stacked layout. Swap-shift lets a staff member request another colleague to take a shift; the recipient can accept, decline, or the originator can cancel. Punch-in/out uses the device's geolocation and a geo-fence (radius configured per location) so a barista can't clock in from home — the app rejects with "You're not at the venue" if outside the fence.

An auto-close cron runs hourly to close any time-clock entries left open past expected end time, and managers can override entries (e.g. correct a forgotten punch-out) with an audit trail. Tip distribution offers four rules: even (split flat across all staff on the period), weighted_by_hours (pro-rata to hours worked), role_percentage (e.g. 40% to bartenders, 30% to servers, 20% to kitchen, 10% to host), and individual_assigned (manager assigns explicit amounts). Payouts use idempotency on (tenant, location, period) so re-running a closed period doesn't double-pay.

Monthly payroll summary exports to CSV and to Fortnox / Visma format, listing per-staff hours, tips, hourly rate, and gross. The whole subsystem talks to the same StaffMember and Shift models from F22.12, so manager-side scheduling and staff-side time-clock are one consistent record.