fix: reduce PDF margins and remove redundant puppeteer footer

Reviewed-on: #19

README.md

@@ -1,11 +1,13 @@
 # CPAS Violation Tracker
 
-Single-container Dockerized web app for CPAS violation documentation.
+Single-container Dockerized web app for CPAS violation documentation and workforce standing management.
-Built with React + Vite (frontend), Node.js + Express (backend), SQLite (database).
+Built with **React + Vite** (frontend), **Node.js + Express** (backend), **SQLite** (database), and **Puppeteer** (PDF generation).
+
+---
 
 ## The only requirement on your machine: Docker Desktop
 
-Everything else — Node.js, npm, React build — happens inside Docker.
+Everything else — Node.js, npm, React build, Chromium for PDF — happens inside Docker.
 
 ---
 
@@ -41,17 +43,87 @@ docker stop cpas-tracker && docker rm cpas-tracker
 docker run -d --name cpas-tracker -p 3001:3001 -v cpas-data:/data cpas-tracker
 ```
 
+---
+
+## Features
+
+### Company Dashboard
+- Live table of all employees sorted by active CPAS points (highest risk first)
+- Summary stat cards: total employees, elite standing (0 pts), with active points, at-risk count, highest active score
+- **At-risk badge**: flags employees within 2 points of the next tier escalation
+- Search/filter by name, department, or supervisor
+- Click any employee name to open their full profile modal
+
+### Violation Form
+- Select existing employee or enter new employee by name
+- **Employee intelligence**: shows current CPAS standing badge and 90-day violation count before submitting
+- Violation type dropdown grouped by category; shows prior 90-day counts inline
+- **Recidivist auto-escalation**: if an employee has prior violations of the same type, points slider auto-sets to maximum per policy
+- Repeat offense badge with prior count displayed
+- Context-sensitive fields (time, minutes late, amount, location, description) shown only when relevant to violation type
+- **Tier crossing warning** (TierWarning component): previews what tier the new points would push the employee into before submission
+- Point slider for discretionary adjustments within the violation's min/max range
+- One-click PDF download immediately after submission
+
+### Employee Profile Modal
+- Full violation history with resolution status
+- Negate / restore individual violations (soft delete with resolution type + notes)
+- Hard delete option for data entry errors
+- PDF download for any historical violation record
+
+### CPAS Tier System
+
+| Points | Tier | Label |
+|--------|------|-------|
+| 0–4    | 0–1  | Elite Standing |
+| 5–9    | 1    | Realignment |
+| 10–14  | 2    | Administrative Lockdown |
+| 15–19  | 3    | Verification |
+| 20–24  | 4    | Risk Mitigation |
+| 25–29  | 5    | Final Decision |
+| 30+    | 6    | Separation |
+
+Scores are computed over a **rolling 90-day window** (negated violations excluded).
+
+### PDF Generation
+- Puppeteer + system Chromium (bundled in Docker image)
+- Generated on-demand per violation via `GET /api/violations/:id/pdf`
+- Filename: `CPAS_<EmployeeName>_<IncidentDate>.pdf`
+- PDF captures prior active points **at the time of the incident** (snapshot stored on insert)
+
+---
+
+## API Reference
+
+| Method | Endpoint | Description |
+|--------|----------|-------------|
+| GET | `/api/health` | Health check |
+| GET | `/api/employees` | List all employees |
+| POST | `/api/employees` | Create or upsert employee |
+| GET | `/api/employees/:id/score` | Get active CPAS score for employee |
+| GET | `/api/dashboard` | All employees with active points + violation counts |
+| POST | `/api/violations` | Log a new violation |
+| GET | `/api/violations/employee/:id` | Get violation history for employee (with resolutions) |
+| PATCH | `/api/violations/:id/negate` | Negate a violation (soft delete + resolution record) |
+| PATCH | `/api/violations/:id/restore` | Restore a negated violation |
+| DELETE | `/api/violations/:id` | Hard delete a violation |
+| GET | `/api/violations/:id/pdf` | Download violation PDF |
+
+---
+
 ## Project Structure
 
 ```
-cpas-violation-tracker/
+cpas/
-├── Dockerfile                  # Multi-stage: builds React + runs Express
+├── Dockerfile                     # Multi-stage: builds React + runs Express w/ Chromium
 ├── .dockerignore
 ├── package.json                   # Backend (Express) deps
 ├── server.js                      # API + static file server
 ├── db/
-│   ├── schema.sql              # Tables + 90-day score view
+│   ├── schema.sql                 # Tables + 90-day active score view
-│   └── database.js             # SQLite connection
+│   └── database.js                # SQLite connection (better-sqlite3)
+├── pdf/
+│   └── generator.js               # Puppeteer PDF generation
 └── client/                        # React frontend (Vite)
     ├── package.json
     ├── vite.config.js
@@ -60,14 +132,84 @@ cpas-violation-tracker/
         ├── main.jsx
         ├── App.jsx
         ├── data/
-        │   └── violations.js   # All CPAS violation definitions
+        │   └── violations.js      # All CPAS violation definitions + groups
+        ├── hooks/
+        │   └── useEmployeeIntelligence.js  # Score + history hook
         └── components/
-            └── ViolationForm.jsx
+            ├── CpasBadge.jsx      # Tier badge + color logic
+            ├── TierWarning.jsx    # Pre-submit tier crossing alert
+            ├── Dashboard.jsx      # Company-wide leaderboard
+            ├── ViolationForm.jsx  # Violation entry form
+            ├── EmployeeModal.jsx  # Employee profile + history modal
+            ├── NegateModal.jsx    # Negate/resolve violation dialog
+            └── ViolationHistory.jsx  # Violation list component
 ```
 
-## Phases
+---
-- [x] Phase 1 — Container scaffold, SQLite schema, base React form
+
-- [ ] Phase 2 — Employee history, prior violation highlighting
+## Database Schema
-- [ ] Phase 3 — Puppeteer PDF generation
+
-- [ ] Phase 4 — Dashboard, CPAS scores, tier warnings
+Three tables + one view:
-- [ ] Phase 5 — Recidivist point auto-suggest
+
+- **`employees`** — id, name, department, supervisor
+- **`violations`** — full incident record including `prior_active_points` snapshot at time of logging
+- **`violation_resolutions`** — resolution type, details, resolved_by (linked to violations)
+- **`active_cpas_scores`** (view) — sum of points for non-negated violations in rolling 90 days, grouped by employee
+
+---
+
+## Roadmap
+
+### ✅ Completed
+
+| Phase | Feature | Description |
+|-------|---------|-------------|
+| 1 | Container scaffold | Docker multi-stage build, Express server, SQLite schema |
+| 1 | Base violation form | Employee fields, violation type, incident date, point submission |
+| 2 | Employee intelligence | Live CPAS standing badge and 90-day count shown before submitting |
+| 2 | Prior violation highlighting | Violation dropdown annotates types with 90-day recurrence counts |
+| 2 | Recidivist auto-escalation | Points slider auto-maximizes on repeat same-type violations |
+| 2 | Violation history | Per-employee history list with resolution status |
+| 3 | PDF generation | Puppeteer/Chromium PDF per violation, downloadable immediately post-submit |
+| 3 | Prior-points snapshot | `prior_active_points` captured at insert time for accurate historical PDFs |
+| 4 | Company dashboard | Sortable employee table with live tier badges and at-risk flags |
+| 4 | Stat cards | Summary counts: total, clean, active, at-risk, highest score |
+| 4 | Tier crossing warning | Pre-submit alert when new points push employee to next tier |
+| 4 | Employee profile modal | Full history, negate/restore, hard delete, per-record PDF download |
+| 4 | Negate & restore | Soft-delete violations with resolution type + notes, fully reversible |
+
+---
+
+### 🔲 Proposed
+
+#### Reporting & Analytics
+- **Violation trends chart** — line/bar chart of violations per day/week/month, filterable by department or supervisor; useful for identifying systemic patterns vs. individual incidents
+- **Department heat map** — grid view showing violation density and average CPAS score by department; helps supervisors identify team-level risk
+- **Expiration timeline** — visual showing which active violations will roll off the 90-day window and when, so supervisors can anticipate tier drops
+- **CSV / Excel export** — bulk export of violations or dashboard data for external reporting or payroll integration
+
+#### Employee Management
+- **Employee edit / merge** — ability to update employee name, department, or supervisor without losing history; merge duplicate records created by name typos
+- **Supervisor view** — scoped dashboard showing only the employees under a given supervisor, useful for multi-supervisor environments
+- **Employee notes / flags** — free-text notes attached to an employee record (e.g. "on PIP", "union member") visible in the profile modal without affecting scoring
+
+#### Violation Workflow
+- **Acknowledgment signature field** — a "received by employee" name/date field on the violation form that prints on the PDF, replacing the blank signature line
+- **Draft / pending violations** — save a violation as draft before finalizing, useful when incidents need review before being officially logged
+- **Violation amendment** — edit a submitted violation's details (not points) with an audit trail, rather than delete-and-resubmit
+- **Bulk violation import** — CSV import for migrating historical records from paper logs or a prior system
+
+#### Notifications & Escalation
+- **Tier escalation alerts** — email or in-app notification when an employee crosses into Tier 2+ so the relevant supervisor is automatically informed
+- **Scheduled summary digest** — weekly email to supervisors listing their employees' current standings and any approaching tier thresholds
+- **At-risk threshold configuration** — make the "at-risk" warning threshold (currently hardcoded at 2 pts) configurable per deployment
+
+#### Infrastructure & Ops
+- **Multi-user auth** — simple login with role-based access (admin, supervisor, read-only); currently the app has no auth and is assumed to run on a trusted internal network
+- **Audit log** — immutable log of all creates, negates, restores, and deletes with timestamp and acting user, stored separately from the violations table
+- **Automated DB backup** — cron job or Docker health hook to snapshot `/data/cpas.db` to a mounted backup volume or remote location on a schedule
+- **Dark/light theme toggle** — the UI is currently dark-only; a toggle would improve usability in bright environments
+
+---
+
+*Proposed features are suggestions based on common HR documentation workflows. Priority and implementation order should be driven by actual operational needs.*

client/src/components/Dashboard.jsx

@@ -12,7 +12,7 @@ const TIERS = [
   { min: 15, max: 19  },
   { min: 20, max: 24  },
   { min: 25, max: 29  },
-  { min: 30, max: 999},
+  { min: 30, max: 999 },
 ];
 
 function nextTierBoundary(points) {
@@ -43,14 +43,14 @@ const s = {
   nameBtn:     { background: 'none', border: 'none', cursor: 'pointer', fontWeight: 600, color: '#d4af37', fontSize: '14px', padding: 0, textDecoration: 'underline dotted' },
   atRiskBadge: { display: 'inline-block', marginLeft: '8px', padding: '2px 8px', borderRadius: '10px', fontSize: '10px', fontWeight: 700, background: '#3b2e00', color: '#ffd666', border: '1px solid #d4af37', verticalAlign: 'middle' },
   zeroRow:     { color: '#77798a', fontStyle: 'italic', fontSize: '12px' },
-  refreshBtn:{ padding: '9px 18px', background: '#d4af37', color: '#000', border: 'none', borderRadius: '6px', cursor: 'pointer', fontWeight: 600, fontSize: '13px' },
+  refreshBtn:  { padding: '9px 18px', background: '#d4af37', color: '#000', border: 'none', borderRadius: '6px', cursor: 'pointer', fontWeight: 600, fontSize: '13px' },
 };
 
 export default function Dashboard() {
   const [employees, setEmployees] = useState([]);
   const [filtered,  setFiltered]  = useState([]);
   const [search,    setSearch]    = useState('');
-  const [selectedId,setSelectedId] = useState(null);
+  const [selectedId, setSelectedId] = useState(null);
   const [loading,   setLoading]   = useState(true);
 
   const load = useCallback(() => {
@@ -77,6 +77,10 @@ export default function Dashboard() {
   const maxPoints   = employees.reduce((m, e) => Math.max(m, e.active_points), 0);
 
   return (
+    // FIX: Fragment wraps both s.wrap AND EmployeeModal so the modal is
+    // outside the s.wrap div — React synthetic events will no longer bubble
+    // from inside the modal up through the Dashboard's DOM tree.
+    <>
       <div style={s.wrap}>
         <div style={s.header}>
           <div>
@@ -84,7 +88,12 @@ export default function Dashboard() {
             <div style={s.subtitle}>Click any employee name to view their full profile</div>
           </div>
           <div style={{ display: 'flex', gap: '10px', alignItems: 'center' }}>
-          <input style={s.search} placeholder="Search name, dept, supervisor…" value={search} onChange={e => setSearch(e.target.value)} />
+            <input
+              style={s.search}
+              placeholder="Search name, dept, supervisor…"
+              value={search}
+              onChange={e => setSearch(e.target.value)}
+            />
             <button style={s.refreshBtn} onClick={load}>↻ Refresh</button>
           </div>
         </div>
@@ -129,17 +138,26 @@ export default function Dashboard() {
             </thead>
             <tbody>
               {filtered.length === 0 && (
-              <tr><td colSpan={7} style={{ ...s.td, textAlign: 'center', ...s.zeroRow }}>No employees found.</td></tr>
+                <tr>
+                  <td colSpan={7} style={{ ...s.td, textAlign: 'center', ...s.zeroRow }}>
+                    No employees found.
+                  </td>
+                </tr>
               )}
               {filtered.map((emp, i) => {
                 const risk     = isAtRisk(emp.active_points);
                 const tier     = getTier(emp.active_points);
                 const boundary = nextTierBoundary(emp.active_points);
                 return (
-                <tr key={emp.id} style={{ background: risk ? '#181200' : i % 2 === 0 ? '#111217' : '#151622' }}>
+                  <tr
+                    key={emp.id}
+                    style={{ background: risk ? '#181200' : i % 2 === 0 ? '#111217' : '#151622' }}
+                  >
                     <td style={{ ...s.td, color: '#77798a', fontSize: '12px' }}>{i + 1}</td>
                     <td style={s.td}>
-                    <button style={s.nameBtn} onClick={() => setSelectedId(emp.id)}>{emp.name}</button>
+                      <button style={s.nameBtn} onClick={() => setSelectedId(emp.id)}>
+                        {emp.name}
+                      </button>
                       {risk && (
                         <span style={s.atRiskBadge}>
                           ⚠ {boundary - emp.active_points} pt{boundary - emp.active_points > 1 ? 's' : ''} to {getTier(boundary).label.split('—')[0].trim()}
@@ -149,7 +167,9 @@ export default function Dashboard() {
                     <td style={{ ...s.td, color: '#c0c2d6' }}>{emp.department || '—'}</td>
                     <td style={{ ...s.td, color: '#c0c2d6' }}>{emp.supervisor || '—'}</td>
                     <td style={s.td}><CpasBadge points={emp.active_points} /></td>
-                  <td style={{ ...s.td, fontWeight: 700, color: tier.color, fontSize: '16px' }}>{emp.active_points}</td>
+                    <td style={{ ...s.td, fontWeight: 700, color: tier.color, fontSize: '16px' }}>
+                      {emp.active_points}
+                    </td>
                     <td style={{ ...s.td, color: '#c0c2d6' }}>{emp.violation_count}</td>
                   </tr>
                 );
@@ -157,13 +177,17 @@ export default function Dashboard() {
             </tbody>
           </table>
         )}
+      </div>
 
+      {/* FIX: EmployeeModal is now OUTSIDE <div style={s.wrap}>.
+          React synthetic events no longer bubble from modal buttons
+          up through Dashboard's component tree. */}
       {selectedId && (
         <EmployeeModal
           employeeId={selectedId}
           onClose={() => { setSelectedId(null); load(); }}
         />
       )}
-    </div>
+    </>
   );
 }

client/src/components/EmployeeModal.jsx

@@ -5,148 +5,66 @@ import NegateModal from './NegateModal';
 
 const s = {
   overlay: {
-    position: 'fixed',
+    position: 'fixed', inset: 0, background: 'rgba(0,0,0,0.75)',
-    inset: 0,
+    zIndex: 1000, display: 'flex', alignItems: 'flex-start', justifyContent: 'flex-end',
-    background: 'rgba(0,0,0,0.75)',
-    zIndex: 1000,
-    display: 'flex',
-    alignItems: 'flex-start',
-    justifyContent: 'flex-end',
   },
   panel: {
-    background: '#111217',
+    background: '#111217', color: '#f8f9fa', width: '680px', maxWidth: '95vw',
-    color: '#f8f9fa',
+    height: '100vh', overflowY: 'auto', boxShadow: '-4px 0 24px rgba(0,0,0,0.7)',
-    width: '680px',
+    display: 'flex', flexDirection: 'column',
-    maxWidth: '95vw',
-    height: '100vh',
-    overflowY: 'auto',
-    boxShadow: '-4px 0 24px rgba(0,0,0,0.7)',
-    display: 'flex',
-    flexDirection: 'column',
   },
   header: {
-    background: 'linear-gradient(135deg, #000000, #151622)',
+    background: 'linear-gradient(135deg, #000000, #151622)', color: 'white',
-    color: 'white',
+    padding: '24px 28px', position: 'sticky', top: 0, zIndex: 10,
-    padding: '24px 28px',
-    position: 'sticky',
-    top: 0,
-    zIndex: 10,
     borderBottom: '1px solid #222',
   },
   closeBtn: {
-    float: 'right',
+    float: 'right', background: 'none', border: 'none', color: 'white',
-    background: 'none',
+    fontSize: '22px', cursor: 'pointer', lineHeight: 1, marginTop: '-2px',
-    border: 'none',
-    color: 'white',
-    fontSize: '22px',
-    cursor: 'pointer',
-    lineHeight: 1,
-    marginTop: '-2px',
-  },
-  body: {
-    padding: '24px 28px',
-    flex: 1,
-  },
-  scoreRow: {
-    display: 'flex',
-    gap: '12px',
-    flexWrap: 'wrap',
-    marginBottom: '24px',
   },
+  body: { padding: '24px 28px', flex: 1 },
+  scoreRow: { display: 'flex', gap: '12px', flexWrap: 'wrap', marginBottom: '24px' },
   scoreCard: {
-    flex: '1',
+    flex: '1', minWidth: '100px', background: '#181924', borderRadius: '8px',
-    minWidth: '100px',
+    padding: '14px', textAlign: 'center', border: '1px solid #2a2b3a',
-    background: '#181924',
-    borderRadius: '8px',
-    padding: '14px',
-    textAlign: 'center',
-    border: '1px solid #2a2b3a',
-  },
-  scoreNum: {
-    fontSize: '26px',
-    fontWeight: 800,
-  },
-  scoreLbl: {
-    fontSize: '11px',
-    color: '#b5b5c0',
-    marginTop: '3px',
   },
+  scoreNum: { fontSize: '26px', fontWeight: 800 },
+  scoreLbl: { fontSize: '11px', color: '#b5b5c0', marginTop: '3px' },
   sectionHd: {
-    fontSize: '13px',
+    fontSize: '13px', fontWeight: 700, color: '#f8f9fa', textTransform: 'uppercase',
-    fontWeight: 700,
+    letterSpacing: '0.5px', marginBottom: '10px', marginTop: '24px',
-    color: '#f8f9fa',
-    textTransform: 'uppercase',
-    letterSpacing: '0.5px',
-    marginBottom: '10px',
-    marginTop: '24px',
   },
   table: {
-    width: '100%',
+    width: '100%', borderCollapse: 'collapse', fontSize: '12px', background: '#181924',
-    borderCollapse: 'collapse',
+    borderRadius: '6px', overflow: 'hidden', border: '1px solid #2a2b3a',
-    fontSize: '12px',
-    background: '#181924',
-    borderRadius: '6px',
-    overflow: 'hidden',
-    border: '1px solid #2a2b3a',
   },
   th: {
-    background: '#050608',
+    background: '#050608', padding: '8px 10px', textAlign: 'left', color: '#f8f9fa',
-    padding: '8px 10px',
+    fontWeight: 600, fontSize: '11px', textTransform: 'uppercase',
-    textAlign: 'left',
-    color: '#f8f9fa',
-    fontWeight: 600,
-    fontSize: '11px',
-    textTransform: 'uppercase',
   },
   td: {
-    padding: '9px 10px',
+    padding: '9px 10px', borderBottom: '1px solid #202231',
-    borderBottom: '1px solid #202231',
+    verticalAlign: 'top', color: '#f8f9fa',
-    verticalAlign: 'top',
-    color: '#f8f9fa',
-  },
-  negatedRow: {
-    background: '#151622',
-    color: '#9ca0b8',
   },
+  negatedRow: { background: '#151622', color: '#9ca0b8' },
   actionBtn: (color) => ({
-    background: 'none',
+    background: 'none', border: `1px solid ${color}`, color,
-    border: `1px solid ${color}`,
+    borderRadius: '4px', padding: '3px 8px', fontSize: '11px',
-    color,
+    cursor: 'pointer', marginRight: '4px', fontWeight: 600,
-    borderRadius: '4px',
-    padding: '3px 8px',
-    fontSize: '11px',
-    cursor: 'pointer',
-    marginRight: '4px',
-    fontWeight: 600,
   }),
   resTag: {
-    display: 'inline-block',
+    display: 'inline-block', padding: '2px 8px', borderRadius: '10px',
-    padding: '2px 8px',
+    fontSize: '10px', fontWeight: 700, background: '#053321',
-    borderRadius: '10px',
+    color: '#9ef7c1', border: '1px solid #0f5132',
-    fontSize: '10px',
-    fontWeight: 700,
-    background: '#053321',
-    color: '#9ef7c1',
-    border: '1px solid #0f5132',
   },
   pdfBtn: {
-    background: 'none',
+    background: 'none', border: '1px solid #d4af37', color: '#ffd666',
-    border: '1px solid #d4af37',
+    borderRadius: '4px', padding: '3px 8px', fontSize: '11px',
-    color: '#ffd666',
+    cursor: 'pointer', fontWeight: 600,
-    borderRadius: '4px',
-    padding: '3px 8px',
-    fontSize: '11px',
-    cursor: 'pointer',
-    fontWeight: 600,
   },
   deleteConfirm: {
-    background: '#3c1114',
+    background: '#3c1114', border: '1px solid #f5c6cb', borderRadius: '6px',
-    border: '1px solid #f5c6cb',
+    padding: '12px', marginTop: '8px', fontSize: '12px', color: '#ffb3b8',
-    borderRadius: '6px',
-    padding: '12px',
-    marginTop: '8px',
-    fontSize: '12px',
-    color: '#ffb3b8',
   },
 };
 
@@ -174,17 +92,11 @@ export default function EmployeeModal({ employeeId, onClose }) {
       .finally(() => setLoading(false));
   }, [employeeId]);
 
-  useEffect(() => {
+  useEffect(() => { load(); }, [load]);
-    load();
-  }, [load]);
 
   const handleDownloadPdf = async (violId, empName, date) => {
-    const response = await axios.get(`/api/violations/${violId}/pdf`, {
+    const response = await axios.get(`/api/violations/${violId}/pdf`, { responseType: 'blob' });
-      responseType: 'blob',
+    const url = window.URL.createObjectURL(new Blob([response.data], { type: 'application/pdf' }));
-    });
-    const url = window.URL.createObjectURL(
-      new Blob([response.data], { type: 'application/pdf' }),
-    );
     const link = document.createElement('a');
     link.href = url;
     link.download = `CPAS_${(empName || '').replace(/[^a-z0-9]/gi, '_')}_${date}.pdf`;
@@ -208,9 +120,7 @@ export default function EmployeeModal({ employeeId, onClose }) {
 
   const handleNegate = async ({ resolution_type, details, resolved_by }) => {
     await axios.patch(`/api/violations/${negating.id}/negate`, {
-      resolution_type,
+      resolution_type, details, resolved_by,
-      details,
-      resolved_by,
     });
     setNegating(null);
     setConfirmDel(null);
@@ -221,115 +131,68 @@ export default function EmployeeModal({ employeeId, onClose }) {
   const active = violations.filter((v) => !v.negated);
   const negated = violations.filter((v) => v.negated);
 
+  // FIX: overlay click only closes if clicking the backdrop itself, NOT children
   const handleOverlayClick = (e) => {
     if (e.target === e.currentTarget) onClose();
   };
 
   return (
+    // FIX: panel uses onClick stopPropagation to prevent bubbling to overlay
     <div style={s.overlay} onClick={handleOverlayClick}>
-      <div style={s.panel}>
+      <div style={s.panel} onClick={(e) => e.stopPropagation()}>
+
+        {/* ── Header ── */}
         <div style={s.header}>
-          <button style={s.closeBtn} onClick={onClose}>
+          <button style={s.closeBtn} onClick={onClose}>✕</button>
-            ✕
+          <div style={{ fontSize: '18px', fontWeight: 700 }}>
-          </button>
+            {employee ? employee.name : 'Employee'}
-          <div style={{ fontSize: '20px', fontWeight: 700 }}>
-            {loading ? 'Loading…' : employee?.name || 'Employee Profile'}
           </div>
           {employee && (
-            <div style={{ fontSize: '12px', opacity: 0.8, marginTop: '4px' }}>
+            <div style={{ fontSize: '12px', color: '#b5b5c0', marginTop: '4px' }}>
-              {[employee.department, employee.supervisor ? `Supervisor: ${employee.supervisor}` : null]
+              {employee.department} {employee.supervisor && `· Supervisor: ${employee.supervisor}`}
-                .filter(Boolean)
-                .join(' · ')}
             </div>
           )}
         </div>
 
+        {/* ── Body ── */}
         <div style={s.body}>
           {loading ? (
-            <p
+            <div style={{ padding: '40px', textAlign: 'center', color: '#b5b5c0' }}>Loading…</div>
-              style={{
-                color: '#77798a',
-                textAlign: 'center',
-                paddingTop: '40px',
-              }}
-            >
-              Loading…
-            </p>
           ) : (
             <>
+              {/* Score Cards */}
+              {score && (
                 <div style={s.scoreRow}>
-                <div
+                  <div style={s.scoreCard}>
-                  style={{
+                    <div style={{ ...s.scoreNum, color: tier?.color || '#f8f9fa' }}>
-                    ...s.scoreCard,
+                      {score.active_points}
-                    borderTop: `3px solid ${tier?.color}`,
-                  }}
-                >
-                  <div
-                    style={{
-                      ...s.scoreNum,
-                      color: tier?.color,
-                    }}
-                  >
-                    {score?.active_points ?? 0}
                     </div>
                     <div style={s.scoreLbl}>Active Points</div>
                   </div>
                   <div style={s.scoreCard}>
-                  <div style={s.scoreNum}>{score?.violation_count ?? 0}</div>
+                    <div style={s.scoreNum}>{score.total_violations}</div>
-                  <div style={s.scoreLbl}>90-Day Violations</div>
+                    <div style={s.scoreLbl}>Total Violations</div>
                   </div>
                   <div style={s.scoreCard}>
-                  <div style={s.scoreNum}>{active.length}</div>
+                    <div style={s.scoreNum}>{score.negated_count}</div>
-                  <div style={s.scoreLbl}>Total On Record</div>
-                </div>
-                <div style={s.scoreCard}>
-                  <div
-                    style={{
-                      ...s.scoreNum,
-                      color: '#ffd666',
-                    }}
-                  >
-                    {negated.length}
-                  </div>
                     <div style={s.scoreLbl}>Negated</div>
                   </div>
+                  <div style={{ ...s.scoreCard, minWidth: '140px' }}>
+                    <div style={{ fontSize: '13px', fontWeight: 700, color: tier?.color || '#f8f9fa' }}>
+                      {tier ? tier.label : '—'}
+                    </div>
+                    <div style={s.scoreLbl}>Current Tier</div>
                   </div>
-
-              {tier && (
-                <div
-                  style={{
-                    background: '#181924',
-                    borderRadius: '6px',
-                    padding: '10px 14px',
-                    marginBottom: '16px',
-                    fontSize: '13px',
-                    border: `1px solid ${tier.color}33`,
-                  }}
-                >
-                  <strong style={{ color: tier.color }}>{tier.label}</strong>
-                  <span
-                    style={{
-                      color: '#b5b5c0',
-                      marginLeft: '10px',
-                      fontSize: '12px',
-                    }}
-                  >
-                    Rolling 90-day window · Points expire automatically
-                  </span>
                 </div>
               )}
+              {score && <CpasBadge points={score.active_points} style={{ marginBottom: '20px' }} />}
 
+              {/* ── Active Violations ── */}
               <div style={s.sectionHd}>Active Violations</div>
               {active.length === 0 ? (
-                <p
+                <div style={{ color: '#77798a', fontStyle: 'italic', fontSize: '12px' }}>
-                  style={{
-                    color: '#77798a',
-                    fontSize: '13px',
-                    fontStyle: 'italic',
-                  }}
-                >
                   No active violations on record.
-                </p>
+                </div>
               ) : (
                 <table style={s.table}>
                   <thead>
@@ -346,91 +209,52 @@ export default function EmployeeModal({ employeeId, onClose }) {
                         <td style={s.td}>{v.incident_date}</td>
                         <td style={s.td}>
                           <div style={{ fontWeight: 600 }}>{v.violation_name}</div>
-                          <div
+                          <div style={{ fontSize: '10px', color: '#9ca0b8' }}>{v.category}</div>
-                            style={{
-                              color: '#b5b5c0',
-                              fontSize: '11px',
-                            }}
-                          >
-                            {v.category}
-                          </div>
                           {v.details && (
-                            <div
+                            <div style={{ fontSize: '10px', color: '#b5b5c0', marginTop: '2px' }}>
-                              style={{
-                                color: '#d1d3e0',
-                                fontSize: '11px',
-                                marginTop: '3px',
-                                fontStyle: 'italic',
-                              }}
-                            >
                               {v.details}
                             </div>
                           )}
                         </td>
-                        <td
+                        <td style={{ ...s.td, fontWeight: 700 }}>{v.points}</td>
-                          style={{
-                            ...s.td,
-                            fontWeight: 700,
-                            color: '#ff8a80',
-                          }}
-                        >
-                          {v.points}
-                        </td>
                         <td style={s.td}>
+                          {/* FIX: All buttons use e.stopPropagation() to prevent overlay close */}
                           <button
-                            style={s.actionBtn('#ffd666')}
+                            style={s.actionBtn('#ffc107')}
-                            onClick={() => setNegating(v)}
+                            onClick={(e) => { e.stopPropagation(); setNegating(v); setConfirmDel(null); }}
                           >
-                            ⊘ Negate
+                            Negate
+                          </button>
+                          <button
+                            style={s.actionBtn('#ff4d4f')}
+                            onClick={(e) => { e.stopPropagation(); setConfirmDel(confirmDel === v.id ? null : v.id); }}
+                          >
+                            {confirmDel === v.id ? 'Cancel' : 'Delete'}
                           </button>
                           <button
                             style={s.pdfBtn}
-                            onClick={() =>
+                            onClick={(e) => { e.stopPropagation(); handleDownloadPdf(v.id, employee?.name, v.incident_date); }}
-                              handleDownloadPdf(
-                                v.id,
-                                employee?.name,
-                                v.incident_date,
-                              )
-                            }
                           >
                             PDF
                           </button>
-                          <br />
+                          {confirmDel === v.id && (
-                          {confirmDel === v.id ? (
                             <div style={s.deleteConfirm}>
-                              <strong>Permanently delete?</strong> This cannot be
+                              Permanently delete? This cannot be undone.
-                              undone.
+                              <div style={{ marginTop: '8px' }}>
-                              <div
-                                style={{
-                                  marginTop: '8px',
-                                  display: 'flex',
-                                  gap: '8px',
-                                }}
-                              >
                                 <button
-                                  style={s.actionBtn('#ffb3b8')}
+                                  style={s.actionBtn('#ff4d4f')}
-                                  onClick={() => handleHardDelete(v.id)}
+                                  onClick={(e) => { e.stopPropagation(); handleHardDelete(v.id); }}
                                 >
                                   Confirm Delete
                                 </button>
                                 <button
-                                  style={s.actionBtn('#9ca0b8')}
+                                  style={s.actionBtn('#888')}
-                                  onClick={() => setConfirmDel(null)}
+                                  onClick={(e) => { e.stopPropagation(); setConfirmDel(null); }}
                                 >
                                   Cancel
                                 </button>
                               </div>
                             </div>
-                          ) : (
-                            <button
-                              style={{
-                                ...s.actionBtn('#c0392b'),
-                                marginTop: '4px',
-                              }}
-                              onClick={() => setConfirmDel(v.id)}
-                            >
-                              ✕ Delete
-                            </button>
                           )}
                         </td>
                       </tr>
@@ -439,9 +263,10 @@ export default function EmployeeModal({ employeeId, onClose }) {
                 </table>
               )}
 
+              {/* ── Negated / Resolved Violations ── */}
               {negated.length > 0 && (
                 <>
-                  <div style={s.sectionHd}>Negated / Resolved Violations</div>
+                  <div style={s.sectionHd}>Negated / Resolved</div>
                   <table style={s.table}>
                     <thead>
                       <tr>
@@ -457,89 +282,60 @@ export default function EmployeeModal({ employeeId, onClose }) {
                         <tr key={v.id} style={s.negatedRow}>
                           <td style={s.td}>{v.incident_date}</td>
                           <td style={s.td}>
-                            <div style={{ textDecoration: 'line-through' }}>
+                            <div style={{ fontWeight: 600 }}>{v.violation_name}</div>
-                              {v.violation_name}
+                            <div style={{ fontSize: '10px', color: '#9ca0b8' }}>{v.category}</div>
-                            </div>
-                            <div
-                              style={{
-                                fontSize: '11px',
-                                color: '#9ca0b8',
-                              }}
-                            >
-                              {v.category}
-                            </div>
-                          </td>
-                          <td
-                            style={{
-                              ...s.td,
-                              textDecoration: 'line-through',
-                              color: '#9ca0b8',
-                            }}
-                          >
-                            {v.points}
                           </td>
+                          <td style={s.td}>{v.points}</td>
                           <td style={s.td}>
                             <span style={s.resTag}>{v.resolution_type}</span>
                             {v.resolution_details && (
-                              <div
+                              <div style={{ fontSize: '10px', color: '#b5b5c0', marginTop: '2px' }}>
-                                style={{
-                                  fontSize: '11px',
-                                  marginTop: '3px',
-                                  color: '#d1d3e0',
-                                }}
-                              >
                                 {v.resolution_details}
                               </div>
                             )}
                             {v.resolved_by && (
-                              <div
+                              <div style={{ fontSize: '10px', color: '#9ca0b8' }}>
-                                style={{
-                                  fontSize: '10px',
-                                  color: '#9ca0b8',
-                                }}
-                              >
                                 by {v.resolved_by}
                               </div>
                             )}
                           </td>
                           <td style={s.td}>
                             <button
-                              style={s.actionBtn('#9ef7c1')}
+                              style={s.actionBtn('#4db6ac')}
-                              onClick={() => handleRestore(v.id)}
+                              onClick={(e) => { e.stopPropagation(); handleRestore(v.id); }}
                             >
-                              ↩ Restore
+                              Restore
                             </button>
-                            {confirmDel === v.id ? (
+                            <button
+                              style={s.actionBtn('#ff4d4f')}
+                              onClick={(e) => { e.stopPropagation(); setConfirmDel(confirmDel === v.id ? null : v.id); }}
+                            >
+                              {confirmDel === v.id ? 'Cancel' : 'Delete'}
+                            </button>
+                            <button
+                              style={s.pdfBtn}
+                              onClick={(e) => { e.stopPropagation(); handleDownloadPdf(v.id, employee?.name, v.incident_date); }}
+                            >
+                              PDF
+                            </button>
+                            {confirmDel === v.id && (
                               <div style={s.deleteConfirm}>
-                                <strong>Permanently delete?</strong>
+                                Permanently delete? This cannot be undone.
-                                <div
+                                <div style={{ marginTop: '8px' }}>
-                                  style={{
-                                    marginTop: '8px',
-                                    display: 'flex',
-                                    gap: '8px',
-                                  }}
-                                >
                                   <button
-                                    style={s.actionBtn('#ffb3b8')}
+                                    style={s.actionBtn('#ff4d4f')}
-                                    onClick={() => handleHardDelete(v.id)}
+                                    onClick={(e) => { e.stopPropagation(); handleHardDelete(v.id); }}
                                   >
-                                    Confirm
+                                    Confirm Delete
                                   </button>
                                   <button
-                                    style={s.actionBtn('#9ca0b8')}
+                                    style={s.actionBtn('#888')}
-                                    onClick={() => setConfirmDel(null)}
+                                    onClick={(e) => { e.stopPropagation(); setConfirmDel(null); }}
                                   >
                                     Cancel
                                   </button>
                                 </div>
                               </div>
-                            ) : (
-                              <button
-                                style={s.actionBtn('#c0392b')}
-                                onClick={() => setConfirmDel(v.id)}
-                              >
-                                ✕ Delete
-                              </button>
                             )}
                           </td>
                         </tr>
@@ -553,6 +349,7 @@ export default function EmployeeModal({ employeeId, onClose }) {
         </div>
       </div>
 
+      {/* FIX: NegateModal rendered OUTSIDE the panel so it sits at root z-index:2000 */}
       {negating && (
         <NegateModal
           violation={negating}

client/src/components/NegateModal.jsx

@@ -2,111 +2,66 @@ import React, { useState } from 'react';
 
 const s = {
   overlay: {
-    position: 'fixed',
+    position: 'fixed', inset: 0, background: 'rgba(0,0,0,0.75)',
-    inset: 0,
+    display: 'flex', alignItems: 'center', justifyContent: 'center',
-    background: 'rgba(0,0,0,0.75)',
-    display: 'flex',
-    alignItems: 'center',
-    justifyContent: 'center',
     zIndex: 2000,
   },
   modal: {
-    width: '480px',
+    width: '480px', maxWidth: '95vw', background: '#111217', borderRadius: '12px',
-    maxWidth: '95vw',
+    boxShadow: '0 16px 40px rgba(0,0,0,0.8)', color: '#f8f9fa',
-    background: '#111217',
+    overflow: 'hidden', border: '1px solid #2a2b3a',
-    borderRadius: '12px',
-    boxShadow: '0 16px 40px rgba(0,0,0,0.8)',
-    color: '#f8f9fa',
-    overflow: 'hidden',
-    border: '1px solid #2a2b3a',
   },
   header: {
-    padding: '18px 24px',
+    padding: '18px 24px', borderBottom: '1px solid #222',
-    borderBottom: '1px solid #222',
     background: 'linear-gradient(135deg, #000000, #151622)',
   },
-  title: {
+  title: { fontSize: '18px', fontWeight: 700 },
-    fontSize: '18px',
+  subtitle: { fontSize: '12px', color: '#c0c2d6', marginTop: '4px' },
-    fontWeight: 700,
+  body: { padding: '18px 24px 8px 24px' },
-  },
-  subtitle: {
-    fontSize: '12px',
-    color: '#c0c2d6',
-    marginTop: '4px',
-  },
-  body: {
-    padding: '18px 24px 8px 24px',
-  },
   pill: {
-    background: '#3b2e00',
+    background: '#3b2e00', borderRadius: '6px', padding: '8px 10px',
-    borderRadius: '6px',
+    fontSize: '12px', color: '#ffd666', border: '1px solid #d4af37', marginBottom: '14px',
-    padding: '8px 10px',
-    fontSize: '12px',
-    color: '#ffd666',
-    border: '1px solid #d4af37',
-    marginBottom: '14px',
-  },
-  label: {
-    fontSize: '13px',
-    fontWeight: 600,
-    marginBottom: '4px',
-    color: '#e5e7f1',
   },
+  label: { fontSize: '13px', fontWeight: 600, marginBottom: '4px', color: '#e5e7f1' },
   input: {
-    width: '100%',
+    width: '100%', padding: '9px 10px', borderRadius: '6px',
-    padding: '9px 10px',
+    border: '1px solid #333544', background: '#050608', color: '#f8f9fa',
-    borderRadius: '6px',
+    fontSize: '13px', fontFamily: 'inherit', marginBottom: '14px',
-    border: '1px solid #333544',
+    boxSizing: 'border-box',
-    background: '#050608',
-    color: '#f8f9fa',
-    fontSize: '13px',
-    fontFamily: 'inherit',
-    marginBottom: '14px',
   },
   textarea: {
-    width: '100%',
+    width: '100%', minHeight: '80px', resize: 'vertical',
-    minHeight: '80px',
+    padding: '9px 10px', borderRadius: '6px', border: '1px solid #333544',
-    resize: 'vertical',
+    background: '#050608', color: '#f8f9fa', fontSize: '13px',
-    padding: '9px 10px',
+    fontFamily: 'inherit', marginBottom: '14px', boxSizing: 'border-box',
-    borderRadius: '6px',
-    border: '1px solid #333544',
-    background: '#050608',
-    color: '#f8f9fa',
-    fontSize: '13px',
-    fontFamily: 'inherit',
-    marginBottom: '14px',
   },
   footer: {
-    display: 'flex',
+    display: 'flex', justifyContent: 'flex-end', gap: '10px',
-    justifyContent: 'flex-end',
+    padding: '16px 24px 20px 24px', background: '#0c0d14', borderTop: '1px solid #222',
-    gap: '10px',
-    padding: '16px 24px 20px 24px',
-    background: '#0c0d14',
-    borderTop: '1px solid #222',
   },
   btnCancel: {
-    padding: '10px 20px',
+    padding: '10px 20px', borderRadius: '6px', border: '1px solid #333544',
-    borderRadius: '6px',
+    background: '#050608', color: '#f8f9fa', fontWeight: 600,
-    border: '1px solid #333544',
+    fontSize: '13px', cursor: 'pointer',
-    background: '#050608',
-    color: '#f8f9fa',
-    fontWeight: 600,
-    fontSize: '13px',
-    cursor: 'pointer',
   },
   btnConfirm: {
-    padding: '10px 22px',
+    padding: '10px 22px', borderRadius: '6px', border: 'none',
-    borderRadius: '6px',
-    border: 'none',
     background: 'linear-gradient(135deg, #d4af37 0%, #ffdf8a 100%)',
-    color: '#000',
+    color: '#000', fontWeight: 700, fontSize: '13px',
-    fontWeight: 700,
+    cursor: 'pointer', textTransform: 'uppercase',
-    fontSize: '13px',
-    cursor: 'pointer',
-    textTransform: 'uppercase',
   },
 };
 
+const RESOLUTION_OPTIONS = [
+  'Corrective Training Completed',
+  'Verbal Warning Issued',
+  'Written Warning Issued',
+  'Management Review',
+  'Policy Exception Approved',
+  'Data Entry Error',
+  'Other',
+];
+
 export default function NegateModal({ violation, onConfirm, onCancel }) {
   const [resolutionType, setResolutionType] = useState('Corrective Training Completed');
   const [details, setDetails] = useState('');
@@ -123,75 +78,59 @@ export default function NegateModal({ violation, onConfirm, onCancel }) {
     });
   };
 
+  // FIX: overlay click only closes on backdrop, NOT modal children
   const handleOverlayClick = (e) => {
     if (e.target === e.currentTarget && onCancel) onCancel();
   };
 
   return (
     <div style={s.overlay} onClick={handleOverlayClick}>
-      <div style={s.modal}>
+      {/* FIX: stopPropagation prevents modal clicks from bubbling to overlay */}
+      <div style={s.modal} onClick={(e) => e.stopPropagation()}>
+
         <div style={s.header}>
-          <div style={s.title}>⊘ Negate Violation Points</div>
+          <div style={s.title}>Negate Violation</div>
           <div style={s.subtitle}>
-            This will zero out the points from this incident. The record remains in the audit log.
+            Record resolution for: <strong>{violation.violation_name}</strong>
           </div>
         </div>
 
         <div style={s.body}>
           <div style={s.pill}>
-            {violation.violation_name} · {violation.points} pts · {violation.incident_date}
+            ⚠ {violation.points} pt{violation.points !== 1 ? 's' : ''} · {violation.incident_date} · {violation.category}
           </div>
 
-          <div>
+          <div style={s.label}>Resolution Type</div>
-            <div style={s.label}>Resolution Type *</div>
           <select
             style={s.input}
             value={resolutionType}
-              onChange={e => setResolutionType(e.target.value)}
+            onChange={(e) => setResolutionType(e.target.value)}
           >
-              <option>Corrective Training Completed</option>
+            {RESOLUTION_OPTIONS.map((opt) => (
-              <option>Documentation Error</option>
+              <option key={opt} value={opt}>{opt}</option>
-              <option>Policy Clarification / Exception</option>
+            ))}
-              <option>Management Discretion</option>
           </select>
-          </div>
 
-          <div>
+          <div style={s.label}>Details / Notes</div>
-            <div style={s.label}>Additional Details</div>
           <textarea
             style={s.textarea}
+            placeholder="Describe the resolution or context…"
             value={details}
-              onChange={e => setDetails(e.target.value)}
+            onChange={(e) => setDetails(e.target.value)}
-              placeholder="Briefly describe why points are being negated..."
           />
-          </div>
 
-          <div>
           <div style={s.label}>Resolved By</div>
           <input
             style={s.input}
+            placeholder="Manager or HR name…"
             value={resolvedBy}
-              onChange={e => setResolvedBy(e.target.value)}
+            onChange={(e) => setResolvedBy(e.target.value)}
-              placeholder="Supervisor or HR"
           />
         </div>
-        </div>
 
         <div style={s.footer}>
-          <button
+          <button style={s.btnCancel} onClick={onCancel}>Cancel</button>
-            type="button"
+          <button style={s.btnConfirm} onClick={handleConfirm}>Confirm Negation</button>
-            style={s.btnCancel}
-            onClick={() => onCancel && onCancel()}
-          >
-            Cancel
-          </button>
-          <button
-            type="button"
-            style={s.btnConfirm}
-            onClick={handleConfirm}
-          >
-            Confirm Negation
-          </button>
         </div>
       </div>
     </div>

client/src/components/ViolationHistory.jsx

@@ -2,19 +2,19 @@ import React, { useState } from 'react';
 
 const s = {
     wrapper:  { marginTop: '24px' },
-    title:    { color: '#2c3e50', fontSize: '16px', fontWeight: 700, marginBottom: '10px' },
+    title:    { color: '#b5b5c0', fontSize: '16px', fontWeight: 700, marginBottom: '10px' },
-    table:    { width: '100%', borderCollapse: 'collapse', fontSize: '13px' },
+    table:    { width: '100%', borderCollapse: 'collapse', fontSize: '13px', background: '#111217', borderRadius: '6px', overflow: 'hidden', border: '1px solid #222' },
-    th:       { background: '#2c3e50', color: 'white', padding: '8px 10px', textAlign: 'left' },
+    th:       { background: '#000000', color: '#f8f9fa', padding: '8px 10px', textAlign: 'left', fontSize: '12px', fontWeight: 600, textTransform: 'uppercase', letterSpacing: '0.5px' },
-    td:       { padding: '8px 10px', borderBottom: '1px solid #dee2e6' },
+    td:       { padding: '8px 10px', borderBottom: '1px solid #1c1d29', color: '#f8f9fa', verticalAlign: 'middle' },
-    trEven:   { background: '#f8f9fa' },
+    trEven:   { background: '#111217' },
-    trOdd:    { background: 'white' },
+    trOdd:    { background: '#151622' },
     pts:      { fontWeight: 700, color: '#667eea' },
     toggle:   { background: 'none', border: 'none', color: '#667eea', cursor: 'pointer', fontSize: '13px', padding: 0, textDecoration: 'underline' },
-    empty:    { color: '#888', fontStyle: 'italic', fontSize: '13px', marginTop: '8px' },
+    empty:    { color: '#77798a', fontStyle: 'italic', fontSize: '13px', marginTop: '8px' },
 };
 
 function formatDate(d) {
-    if (!d) return '—';
+    if (!d) return '–';
     const dt = new Date(d + 'T12:00:00');
     return dt.toLocaleDateString('en-US', { year: 'numeric', month: 'short', day: 'numeric', timeZone: 'America/Chicago' });
 }
@@ -44,9 +44,9 @@ export default function ViolationHistory({ history, loading }) {
                         <tr key={v.id} style={i % 2 === 0 ? s.trEven : s.trOdd}>
                             <td style={s.td}>{formatDate(v.incident_date)}</td>
                             <td style={s.td}>{v.violation_name}</td>
-                            <td style={s.td}>{v.category}</td>
+                            <td style={{ ...s.td, color: '#c0c2d6' }}>{v.category}</td>
                             <td style={{ ...s.td, ...s.pts }}>{v.points}</td>
-                            <td style={s.td}>{v.details || '—'}</td>
+                            <td style={{ ...s.td, color: '#c0c2d6' }}>{v.details || '–'}</td>
                         </tr>
                     ))}
                 </tbody>

pdf/generator.js

@@ -30,18 +30,12 @@ async function generatePdf(violation, score) {
             format:              'Letter',
             printBackground:     true,
             margin: {
-                top:    '0.6in',
+                top:    '0.35in',
-                bottom: '0.7in',
+                bottom: '0.35in',
-                left:   '0.75in',
+                left:   '0.4in',
-                right:  '0.75in',
+                right:  '0.4in',
             },
-            displayHeaderFooter: true,
+            displayHeaderFooter: false,
-            headerTemplate:      '<div></div>',
-            footerTemplate: `
-                <div style="font-size:9px; color:#888; width:100%; text-align:center; padding:0 0.75in;">
-                    CONFIDENTIAL — MPM Internal HR Document &nbsp;|&nbsp;
-                    Page <span class="pageNumber"></span> of <span class="totalPages"></span>
-                </div>`,
         });
 
         return pdf;

server.js

@@ -70,7 +70,7 @@ app.get('/api/violations/employee/:id', (req, res) => {
   res.json(rows);
 });
 
-// NEW helper: compute prior_active_points at time of insert (excluding this violation)
+// Helper: compute prior_active_points at time of insert
 function getPriorActivePoints(employeeId, incidentDate) {
   const row = db.prepare(
     `SELECT COALESCE(SUM(points),0) AS pts
@@ -116,9 +116,63 @@ app.post('/api/violations', (req, res) => {
   res.status(201).json({ id: result.lastInsertRowid });
 });
 
-// Negate / restore / delete endpoints unchanged ...
+// ── Negate a violation ──────────────────────────────────────────────────────
+app.patch('/api/violations/:id/negate', (req, res) => {
+  const { resolution_type, details, resolved_by } = req.body;
+  const id = req.params.id;
 
-// PDF endpoint — use stored prior_active_points snapshot
+  const violation = db.prepare('SELECT * FROM violations WHERE id = ?').get(id);
+  if (!violation) return res.status(404).json({ error: 'Violation not found' });
+
+  // Mark negated
+  db.prepare('UPDATE violations SET negated = 1 WHERE id = ?').run(id);
+
+  // Upsert resolution record
+  const existing = db.prepare('SELECT id FROM violation_resolutions WHERE violation_id = ?').get(id);
+  if (existing) {
+    db.prepare(`
+      UPDATE violation_resolutions
+      SET resolution_type = ?, details = ?, resolved_by = ?, created_at = datetime('now')
+      WHERE violation_id = ?
+    `).run(resolution_type || 'Resolved', details || null, resolved_by || null, id);
+  } else {
+    db.prepare(`
+      INSERT INTO violation_resolutions (violation_id, resolution_type, details, resolved_by)
+      VALUES (?, ?, ?, ?)
+    `).run(id, resolution_type || 'Resolved', details || null, resolved_by || null);
+  }
+
+  res.json({ success: true });
+});
+
+// ── Restore a negated violation ─────────────────────────────────────────────
+app.patch('/api/violations/:id/restore', (req, res) => {
+  const id = req.params.id;
+
+  const violation = db.prepare('SELECT * FROM violations WHERE id = ?').get(id);
+  if (!violation) return res.status(404).json({ error: 'Violation not found' });
+
+  db.prepare('UPDATE violations SET negated = 0 WHERE id = ?').run(id);
+  db.prepare('DELETE FROM violation_resolutions WHERE violation_id = ?').run(id);
+
+  res.json({ success: true });
+});
+
+// ── Hard delete a violation ─────────────────────────────────────────────────
+app.delete('/api/violations/:id', (req, res) => {
+  const id = req.params.id;
+
+  const violation = db.prepare('SELECT * FROM violations WHERE id = ?').get(id);
+  if (!violation) return res.status(404).json({ error: 'Violation not found' });
+
+  // Delete resolution first (FK safety)
+  db.prepare('DELETE FROM violation_resolutions WHERE violation_id = ?').run(id);
+  db.prepare('DELETE FROM violations WHERE id = ?').run(id);
+
+  res.json({ success: true });
+});
+
+// ── PDF endpoint ─────────────────────────────────────────────────────────────
 app.get('/api/violations/:id/pdf', async (req, res) => {
   try {
     const violation = db.prepare(`
@@ -130,13 +184,11 @@ app.get('/api/violations/:id/pdf', async (req, res) => {
 
     if (!violation) return res.status(404).json({ error: 'Violation not found' });
 
-    // For PDF, compute score row but pass stored prior_active_points so math is stable
     const active = db.prepare('SELECT * FROM active_cpas_scores WHERE employee_id = ?')
       .get(violation.employee_id) || { active_points: 0, violation_count: 0 };
 
     const scoreForPdf = {
       employee_id:     violation.employee_id,
-      // snapshot at time of violation (if present); fall back to current
       active_points:   violation.prior_active_points != null ? violation.prior_active_points : active.active_points,
       violation_count: active.violation_count,
     };