Migration fixes

2026-05-21 06:29:37 +08:00
parent 5d0a66bb52
commit 7f38086237
2 changed files with 347 additions and 0 deletions
@@ -0,0 +1,106 @@
+-- Add location quality metadata columns to attendance_logs.
+-- These are populated by the extended RPCs and used for admin audit of
+-- suspicious check-ins (mock location, low accuracy).
+
+ALTER TABLE attendance_logs
+  ADD COLUMN IF NOT EXISTS check_in_accuracy   double precision,
+  ADD COLUMN IF NOT EXISTS check_in_is_mocked  boolean NOT NULL DEFAULT false,
+  ADD COLUMN IF NOT EXISTS check_out_accuracy  double precision,
+  ADD COLUMN IF NOT EXISTS check_out_is_mocked boolean NOT NULL DEFAULT false;
+
+-- Extend attendance_check_in to accept and store location metadata.
+-- New params have defaults so existing callers without them continue to work.
+CREATE OR REPLACE FUNCTION public.attendance_check_in(
+  p_duty_id    uuid,
+  p_lat        double precision,
+  p_lng        double precision,
+  p_accuracy   double precision DEFAULT NULL,
+  p_is_mocked  boolean          DEFAULT false
+) RETURNS uuid
+LANGUAGE plpgsql SECURITY DEFINER
+AS $$
+DECLARE
+  v_schedule duty_schedules%ROWTYPE;
+  v_log_id   uuid;
+  v_now      timestamptz := now();
+  v_status   text;
+BEGIN
+  SELECT * INTO v_schedule FROM duty_schedules WHERE id = p_duty_id;
+  IF NOT FOUND THEN
+    RAISE EXCEPTION 'Duty schedule not found';
+  END IF;
+  IF v_schedule.user_id != auth.uid() THEN
+    RAISE EXCEPTION 'Not your duty schedule';
+  END IF;
+
+  IF v_now < (v_schedule.start_time - interval '2 hours') THEN
+    RAISE EXCEPTION 'Too early to check in (2-hour window)';
+  END IF;
+  IF v_now > v_schedule.end_time THEN
+    RAISE EXCEPTION 'Duty has already ended';
+  END IF;
+
+  IF v_now <= v_schedule.start_time THEN
+    v_status := 'arrival';
+  ELSE
+    v_status := 'late';
+  END IF;
+
+  INSERT INTO attendance_logs (
+    user_id, duty_schedule_id, check_in_at, check_in_lat, check_in_lng,
+    check_in_accuracy, check_in_is_mocked
+  )
+  VALUES (
+    auth.uid(), p_duty_id, v_now, p_lat, p_lng,
+    p_accuracy, p_is_mocked
+  )
+  RETURNING id INTO v_log_id;
+
+  UPDATE duty_schedules
+  SET check_in_at       = COALESCE(check_in_at, v_now),
+      check_in_location = ST_SetSRID(ST_MakePoint(p_lng, p_lat), 4326)::geography,
+      status            = CASE
+                            WHEN check_in_at IS NULL THEN v_status::duty_status
+                            ELSE status
+                          END
+  WHERE id = p_duty_id;
+
+  RETURN v_log_id;
+END;
+$$;
+
+-- Extend attendance_check_out to accept and store location metadata.
+CREATE OR REPLACE FUNCTION public.attendance_check_out(
+  p_attendance_id uuid,
+  p_lat           double precision,
+  p_lng           double precision,
+  p_justification text             DEFAULT NULL,
+  p_accuracy      double precision DEFAULT NULL,
+  p_is_mocked     boolean          DEFAULT false
+) RETURNS void
+LANGUAGE plpgsql SECURITY DEFINER
+AS $$
+DECLARE
+  v_log attendance_logs%ROWTYPE;
+BEGIN
+  SELECT * INTO v_log FROM attendance_logs WHERE id = p_attendance_id;
+  IF NOT FOUND THEN
+    RAISE EXCEPTION 'Attendance log not found';
+  END IF;
+  IF v_log.user_id != auth.uid() THEN
+    RAISE EXCEPTION 'Not your attendance log';
+  END IF;
+  IF v_log.check_out_at IS NOT NULL THEN
+    RAISE EXCEPTION 'Already checked out';
+  END IF;
+
+  UPDATE attendance_logs
+  SET check_out_at        = now(),
+      check_out_lat       = p_lat,
+      check_out_lng       = p_lng,
+      justification       = COALESCE(p_justification, justification),
+      check_out_accuracy  = p_accuracy,
+      check_out_is_mocked = p_is_mocked
+  WHERE id = p_attendance_id;
+END;
+$$;