diff --git a/server.js b/server.js
index 60d9cc7..4e88547 100644
--- a/server.js
+++ b/server.js
@@ -452,6 +452,35 @@ app.get('/api/user/notes', authenticateToken, async (req, res) => {
res.status(500).json({ message: 'Failed to delete time entry.' });
}
});
+
+ app.post('/api/admin/logs/archive/:id', authenticateToken, requireRole('admin'), async (req, res) => {
+ try {
+ const { id } = req.params;
+ const entry = await db.get("SELECT * FROM time_entries WHERE id = ?", [id]);
+
+ if (!entry) {
+ return res.status(404).json({ message: "Time entry not found." });
+ }
+
+ if (entry.status !== 'out') {
+ return res.status(400).json({ message: "Only completed (punched-out) entries can be archived." });
+ }
+
+ const archivedAt = new Date().toISOString();
+ await db.exec('BEGIN TRANSACTION');
+ await db.run('INSERT INTO archived_time_entries (id, user_id, username, punch_in_time, punch_out_time, status, archived_at) VALUES (?, ?, ?, ?, ?, ?, ?)',
+ [entry.id, entry.user_id, entry.username, entry.punch_in_time, entry.punch_out_time, entry.status, archivedAt]
+ );
+ await db.run('DELETE FROM time_entries WHERE id = ?', [id]);
+ await db.exec('COMMIT');
+
+ res.json({ message: 'Time entry archived successfully.' });
+ } catch (err) {
+ await db.exec('ROLLBACK');
+ console.error("Archiving error:", err)
+ res.status(500).json({ message: 'Failed to archive time entry.' });
+ }
+ });
app.post('/api/admin/force-clock-out', authenticateToken, requireRole('admin'), async (req, res) => {
try {