תיעוד טכני

app/
├── models_attendance.py      # מודלים של מסד הנתונים
├── api_attendance.py          # API endpoints
├── routes_attendance.py       # Flask routes (HTML pages)
├── templates/
│   └── attendance/            # 27 HTML templates
│       ├── employee-dashboard.html
│       ├── admin-dashboard.html
│       ├── check-in-out.html
│       └── ...
├── static/
│   ├── css/
│   │   └── modules/
│   │       └── attendance.css
│   ├── js/
│   │   └── modules/
│   │       └── attendance-manager.js
│   └── docs/
│       └── attendance/        # Documentation
└── migrations/                # Database migrations

# Example query
from app.models_attendance import AttendanceRecord

# Get today's attendance for a user
today_attendance = AttendanceRecord.query.filter(
    AttendanceRecord.user_id == user_id,
    func.date(AttendanceRecord.check_in_time) == date.today()
).first()

# All API endpoints require authentication
from flask_login import login_required, current_user

# Permission decorators
@require_role('admin', 'manager')  # Only admin or manager
@require_admin                      # Only admin
@can_view_user_data(user_id)      # Can view specific user data

{
  "success": false,
  "error": "נדרשת הזדהות",
  "code": 401
}

// File: attendance-manager.js (583 lines)

class AttendanceManager {
    constructor() {
        this.attendanceStatus = null;
        this.currentLocation = null;
        this.init();
    }

    async init() {
        // Initialize the manager
        await this.loadAttendanceStatus();
        this.setupEventListeners();
        this.requestLocation();
    }

    // Main methods:
    async loadAttendanceStatus()      // GET /api/attendance/status
    async performCheckIn()             // POST /api/attendance/check-in
    async performCheckOut()            // POST /api/attendance/check-out
    async loadLeaveRequests()          // GET /api/attendance/leave-requests
    async submitLeaveRequest()         // POST /api/attendance/leave-requests
    renderAttendanceStatus()           // Update UI
    // ... +30 more methods
}

// Initialize on page load
document.addEventListener('DOMContentLoaded', () => {
    window.attendanceManager = new AttendanceManager();
});

1. User clicks "כניסה" button
   ↓
2. AttendanceManager.performCheckIn()
   ↓
3. Show loading state (button text: "מבצע כניסה...")
   ↓
4. Get GPS location (if permitted)
   ↓
5. POST /api/attendance/check-in
   ↓
6. API validates: not already checked in
   ↓
7. Create AttendanceRecord in DB
   ↓
8. Return success response
   ↓
9. Show SweetAlert success message
   ↓
10. Update UI: button changes to "יציאה" (red)
    ↓
11. Display check-in time in card
    ↓
12. Reload status from server (verify)

// Extract data from API response
const response = await fetch('/api/attendance/status');
const json = await response.json();

// Handle both formats:
// New: { success: true, data: { checked_in: false } }
// Old: { checked_in: false }
const data = json.data || json;

this.attendanceStatus = data;

renderAttendanceStatus() {
    const status = this.attendanceStatus;

    // Determine state
    const isCheckedIn = status.checked_in;
    const isCheckedOut = status.check_out_time != null;

    if (isCheckedOut) {
        // State 3: Completed for today
        statusClass = 'complete';
        buttonText = 'הושלם ליום זה';
        buttonDisabled = true;
        buttonClass = 'btn-secondary';
    } else if (isCheckedIn) {
        // State 2: Checked in, can check out
        statusClass = 'active';
        buttonText = 'יציאה';
        buttonDisabled = false;
        buttonClass = 'btn-danger';
    } else {
        // State 1: Not checked in yet
        statusClass = 'inactive';
        buttonText = 'כניסה';
        buttonDisabled = false;
        buttonClass = 'btn-success';
    }

    // Update DOM
    document.querySelector('button').textContent = buttonText;
}

# 1. Clone the repository
git clone https://github.com/your-org/attendance-system.git
cd attendance-system

# 2. Create virtual environment
python3 -m venv venv
source venv/bin/activate

# 3. Install dependencies
pip install -r requirements.txt

# 4. Setup database
export DATABASE_URL="postgresql://user:pass@localhost/attendance"
flask db upgrade

# 5. Run the application
flask run

# Using docker-compose
docker-compose up -d

# Check logs
docker-compose logs -f web

# Run migrations
docker-compose exec web flask db upgrade

# Create demo data
docker-compose exec web python create_attendance_demo_data.py

# .env file
DATABASE_URL=postgresql://user:pass@db:5432/techlabs
SECRET_KEY=your-secret-key-here
FLASK_ENV=production
FLASK_DEBUG=0

# Optional
ENABLE_GPS_TRACKING=true
MAX_DISTANCE_METERS=500
DEFAULT_WORK_HOURS=8

from app.models_attendance import AttendanceAuditLog

# Log example
audit = AttendanceAuditLog(
    user_id=admin_id,
    action='EDIT_ATTENDANCE',
    target_user_id=employee_id,
    old_value='08:30',
    new_value='08:00',
    reason='תיקון לבקשת עובד',
    ip_address=request.remote_addr
)
db.session.add(audit)
db.session.commit()

# Example: Efficient query with JOIN
records = db.session.query(
    AttendanceRecord, User
).join(
    User, AttendanceRecord.user_id == User.id
).filter(
    func.date(AttendanceRecord.check_in_time) == date.today()
).all()

# Instead of:
# for record in records:
#     user = User.query.get(record.user_id)  # N+1 problem!

# Run all tests
pytest

# Run specific test file
pytest tests/test_attendance_api.py

# Run with coverage
pytest --cov=app/api_attendance --cov-report=html

# Run UX tests (Playwright)
node test_attendance_ux.js

def test_check_in(client, auth):
    # Login as employee
    auth.login('david.cohen@techlabs.com', '123456')

    # Perform check-in
    response = client.post('/api/attendance/check-in', json={
        'location': '32.0853,34.7818'
    })

    assert response.status_code == 200
    data = response.get_json()
    assert data['success'] == True
    assert 'check_in_time' in data['data']

    # Verify in database
    record = AttendanceRecord.query.filter_by(
        user_id=auth.user_id,
        check_in_time__isnot=None
    ).first()
    assert record is not None