Employee self-service
Leave requests
Personal leave request list, status, and allowed submit or cancel actions. Employee requests stay separated from internal approval context.
Open
Open employee-safe requests in draft or submitted state.
Cancellable
Only cancellable requests render a real cancel form.
Reviewed
Reviewed dates are shown without internal approver notes.
Latest
Latest employee-visible request state.
Requests
Personal leave status
Rows show personal request status, dates, and only the cancel action allowed by the employee facade.
No leave requests available
No leave requests are shown until scoped employee access is active, or until a request is submitted through the employee action adapter.
Route contract
Leave boundary
Leave routes consume only the page adapter and employee action adapters.
Projection
Access RequiredPersonal leave request list, status, and allowed submit or cancel actions.
Services
Approval workflow remains internal.
Resources
Request ownership is checked server-side.
Privacy boundary
Employee-safe guardrails
These checks are visible on every employee page so the surface never blurs employee, client, candidate, and internal contexts.
No personal record selected
SafeThe page does not infer an employee from route params, email, or client membership.
No direct lifecycle reads
SafeRoute components consume this page adapter and contract metadata only.
No private internals
SafeInternal notes, client-only commentary, provider payloads, and raw audit rows are outside the employee-safe contract.